skills/vasanth19/skills/c-replicate/Socket

c-replicate

Warn

Audited by Socket on May 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's stated purpose is Replicate direct API access, but it routes credentials and model traffic to non-official c-replicate.com endpoints and instructs users to obtain tokens there. That mismatch between purpose, credential handling, and network destination is a strong data-flow integrity failure and could enable credential interception.

Confidence: 94%Severity: 88%

Audit Metadata

Analyzed At

May 5, 2026, 07:41 PM

Package URL

pkg:socket/skills-sh/Vasanth19%2Fskills%2Fc-replicate%2F@5e7caff82bfc2a00af70b29ba83e11990e92137f