lokalise

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is coherent, but it routes all Lokalise access and authentication through an unofficial third-party MCP provider (Unbrowse) rather than first-party Lokalise endpoints. That intermediary design is disclosed and not overtly malicious, yet it creates medium risk from credential forwarding, remote tool trust, and indirect data exposure disproportionate to a simple website-reading skill.

Confidence: 89%Severity: 66%
Audit Metadata
Analyzed At
Sep 28, 2026, 10:58 AM
Package URL
pkg:socket/skills-sh/unbrowse-ai%2Fsites%2Flokalise%2F@76eeac6a4dbc0afbfef5b29439d82fd117c5e42c74ec7ca3503454b14de5012b