deepseek-integration

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The DeepSeek Integration Skill presents a coherent, purpose-aligned set of capabilities: a Rust-based HTTP client with connection pooling, supported streaming, secure API key handling via system keychain, and robust error/retry logic. Data flows and access are proportionate to the task, with no evident credential harvesting, insecure self-updates, or unauthorized data exfiltration. The only notable considerations are the need to ensure the SSE payload parsing matches the API's actual streaming format and to document rotation/rotation policies for API keys if used in production. Overall, the footprint is benign and appropriate for its stated purpose.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 12:26 AM
Package URL
pkg:socket/skills-sh/cacr92%2Fwereply%2Fdeepseek-integration%2F@fdd0baf07156fb22771e713f6182105af873680e