search-router

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Mostly coherent as a code-search routing skill, but its primary dependency is an unverified `tldr` CLI with unclear provenance and undocumented semantic-search data handling. Low evidence of malware, but the dependency trust gap makes the skill high risk from a supply-chain perspective.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Mar 23, 2026, 09:06 AM
Package URL
pkg:socket/skills-sh/vibeeval%2Fvibecosystem%2Fsearch-router%2F@785698a6d86760f6c8890efa80a9f5ca68feb2d6
Security Audit — socket — search-router