telekom
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The command-injection finding is a false positive, but the skill routes Telekom access and the user's Unbrowse credentials through an unofficial third-party service. That intermediary model is coherent with the stated purpose yet raises medium trust and data-flow risk because credentials and content do not go directly to Telekom.
Confidence: 90%Severity: 55%
Audit Metadata