orf-at
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is mostly coherent as an unofficial hosted integration for reading orf.at, and its install path appears official to Unbrowse rather than an arbitrary payload. The main risk is data-flow integrity: all requests and auth are routed through Unbrowse, a third-party intermediary unrelated to orf.at, plus the server exposes broader browsing/scraping capabilities than the narrow read-only headline suggests.
Confidence: 90%Severity: 58%
Audit Metadata