lokalise
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent, but it routes all Lokalise access and authentication through an unofficial third-party MCP provider (Unbrowse) rather than first-party Lokalise endpoints. That intermediary design is disclosed and not overtly malicious, yet it creates medium risk from credential forwarding, remote tool trust, and indirect data exposure disproportionate to a simple website-reading skill.
Confidence: 89%Severity: 66%
Audit Metadata