connecting-to-logseq

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill’s stated purpose (managing Logseq connections via HTTP API, CLI, or MCP) is coherent with its implemented capabilities and data flows. All installations and dependencies rely on standard, verifiable sources (official npm registry, local ports). Data flows are confined largely to local machine scope with tokens used for authentication to localhost endpoints, which is appropriate for a development/debugging tool. The primary security considerations are token management through environment variables and config files, plus the potential for autonomous invocation without explicit per-action confirmation. Overall, the footprint is proportionate and benign for a tool intended for local Logseq integration, with moderate attention needed for secret handling and user consent for auto-invoked actions.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 09:59 AM
Package URL
pkg:socket/skills-sh/C0ntr0lledCha0s%2Fclaude-code-plugin-automations%2Fconnecting-to-logseq%2F@8f54070e330063c983009c7aba77c39f4ff02665