agent-reach
Fail
Audited by Socket on Mar 16, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS: the broad internet-access purpose partly matches the platform tooling, but the actual footprint is disproportionate and risky. It uses an unpinned GitHub installer, installs multiple unverifiable external CLIs, imports browser cookies, forwards credentials to third-party tools, routes some traffic through Jina proxy services, and enables public posting. High security risk; not confirmed malware.
Confidence: 86%Severity: 88%
Audit Metadata