webread

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior matches the stated purpose of saving and summarizing web pages, including authenticated ones, but the footprint is moderately risky: it reuses live browser session state, processes arbitrary external content that could contain prompt-injection text, and includes one unofficial personal-repo CLI for Twitter. Not confirmed malicious, but broader and riskier than a simple web-reader skill.

Confidence: 82%Severity: 63%
Audit Metadata
Analyzed At
May 6, 2026, 06:25 AM
Package URL
pkg:socket/skills-sh/xpzouying%2Flearn-skills%2Fwebread%2F@69217fb8b1db0466db9865690dd58346d8ee3a2a
Security Audit — socket — webread