agent-reach

Fail

Audited by Socket on Mar 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: the broad internet-access purpose partly matches the platform tooling, but the actual footprint is disproportionate and risky. It uses an unpinned GitHub installer, installs multiple unverifiable external CLIs, imports browser cookies, forwards credentials to third-party tools, routes some traffic through Jina proxy services, and enables public posting. High security risk; not confirmed malware.

Confidence: 86%Severity: 88%
Audit Metadata
Analyzed At
Mar 16, 2026, 02:29 AM
Package URL
pkg:socket/skills-sh/zhangdszq%2Fvk-skills%2Fagent-reach%2F@c82c0ca0e90db8a9bf872c1f116afde06591e6f4