pikastream
Warn
Audited by Socket on Apr 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s meeting-bot purpose mostly matches its capabilities, but it routes sensitive credentials and meeting data to a poorly verifiable random-looking host and enables autonomous real-world meeting participation with billing impact. No malware or installer payload is evident, but the endpoint trust and action scope make this a medium-high security risk.
Confidence: 85%Severity: 68%
Audit Metadata