skills/ztemerbekov/a1-yandex-kit-skills/a1-yandex-kit-orders/Socket

a1-yandex-kit-orders

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose and official Yandex API data flow are coherent, and the bundled scripts appear benign. The main risk is the recommendation to use an unverified mcp-yandex-kit server/tool path that may receive the Yandex API token, creating medium supply-chain and credential-forwarding concern despite otherwise proportional scope.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Aug 15, 2026, 01:28 PM

Package URL

pkg:socket/skills-sh/ztemerbekov%2Fa1-yandex-kit-skills%2Fa1-yandex-kit-orders%2F@c11a33037acb55fe7b59ea8a2ee27260802c1c0adeada862111bb4f4b6ab6ae8