oray

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose mostly matches its capabilities, but it routes all Oray access and credentials through Unbrowse, an unofficial third-party intermediary, instead of Oray directly. There is no clear malware behavior or hidden execution, but the third-party credential/data flow and broader browser automation make the skill medium-to-high risk.

Confidence: 91%Severity: 69%
Audit Metadata
Analyzed At
Sep 28, 2026, 10:58 AM
Package URL
pkg:socket/skills-sh/unbrowse-ai%2Fsites%2Foray%2F@f325460b6a7cc281caaa07ee837dea8883a9998e9e30d28f0539a9b70e71fb98