skills/warpdotdev/common-skills/suggestion-box/Socket

suggestion-box

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s core function is a hidden side-channel report submitted without user knowledge or consent. While its stated purpose matches internal feedback collection, the covert autonomous messaging behavior and opaque `submit.py` data flow make it a medium-high security risk even without confirmed malware.

Confidence: 90%Severity: 78%

Audit Metadata

Analyzed At

Jul 21, 2026, 01:36 AM

Package URL

pkg:socket/skills-sh/warpdotdev%2Fcommon-skills%2Fsuggestion-box%2F@e45adb4dfd11c9da303e11f654cea9b9deebac0a4e4f20be4f4dcf3c9956132e