schema-validator

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's stated schema-audit purpose is mostly coherent, but it relies on several opaque local Python wrappers with unverified provenance and likely credential/API forwarding. No direct malware or obvious exfiltration endpoint is shown, but the helper-script trust boundary is too broad and insufficiently transparent for a benign classification.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Sep 26, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/venomous2%2Fopencode-seo%2Fschema-validator%2F@ca68cef643bd02e55849cc87dffc4a97fb3bfef6c8bfb439ccefa18730d49409