komoot

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's basic read-only komoot purpose is plausible, but its actual data flow is through Unbrowse as a third-party proxy and credential gate rather than direct komoot access. That intermediary model is disclosed and not overtly malicious, yet it expands trust, forwards user activity to another service, and grants broader remote browsing/task capabilities than the narrow komoot description suggests.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Sep 28, 2026, 10:58 AM
Package URL
pkg:socket/skills-sh/unbrowse-ai%2Fsites%2Fkomoot%2F@930bef9ad41d97a0c7d71f04a1f92e9b44db02396f00689f54c7179693c0d3af