pikastream

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s meeting-bot purpose mostly matches its capabilities, but it routes sensitive credentials and meeting data to a poorly verifiable random-looking host and enables autonomous real-world meeting participation with billing impact. No malware or installer payload is evident, but the endpoint trust and action scope make this a medium-high security risk.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Apr 13, 2026, 12:39 PM
Package URL
pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Fpikastream%2F@7cbc8a3d86c4b227c899fec6d3b9799e8e6600fe