Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose matches its capabilities, and the static command-injection hit is benign documentation. However, all Google interactions, authentication, and optional site login automation are routed through Unbrowse's third-party hosted MCP/cloud browser rather than official Google APIs, creating meaningful data-flow and trust risk disproportionate to a simple 'Google for agents' integration.
Confidence: 88%Severity: 62%
Audit Metadata