Podcast RSS Feed Transcriber

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The stated capabilities are broadly consistent with a podcast transcription skill, but the artifact provided is only marketplace-style documentation and its main action is to install a remote skill from a registry. That transitive install model and lack of concrete code/endpoints make this medium-risk and better classified as suspicious than benign, though there is no clear evidence of malware or credential theft in the provided text.

Confidence: 76%Severity: 62%
Audit Metadata
Analyzed At
Mar 29, 2026, 03:38 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fpodcast-rss-feed-transcriber%2F@84ce3691016eb84e00bb3fc8e072574649ab3cd6