searchnews

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能的新闻抓取目的与主要能力大体一致,外部新闻源也基本是对应媒体官方域名,未见明显凭据窃取或恶意外传路径。主要风险在于核心流程依赖本地未验证脚本及其他技能,形成中等供应链/信任链风险;整体更像可疑的高权限自动化工作流,而非确认恶意。

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 06:24 AM
Package URL
pkg:socket/skills-sh/zrt-ai-lab%2Fopencode-skills%2Fsearchnews%2F@45f82ee1f366141a3caaac5aa62ad4f1935e2c524093a9665c55d9bc9ba6ae6b
Security Audit — socket — searchnews