wrangling-skills

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. Most sub-skills are benign documentation-style data wrangling guides, but streamline-analyst-guide expands scope by installing and running third-party code from a personal GitHub repo and may pass user datasets and an OpenAI API key into that code. This is internally plausible for the stated purpose, but trust and credential-forwarding risks make the overall skill set medium risk rather than benign.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:31 AM
Package URL
pkg:socket/skills-sh/wentorai%2Fresearch-plugins%2Fwrangling-skills%2F@18ad5bb942371532bb42edf8f823e16c770a3c70e8614c4f7e25418795d6991e