komoot
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's basic read-only komoot purpose is plausible, but its actual data flow is through Unbrowse as a third-party proxy and credential gate rather than direct komoot access. That intermediary model is disclosed and not overtly malicious, yet it expands trust, forwards user activity to another service, and grants broader remote browsing/task capabilities than the narrow komoot description suggests.
Confidence: 89%Severity: 64%
Audit Metadata