subway-info

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall purpose is benign and the credential scope is proportionate, but trust is weakened by two internal inconsistencies: a preferred CLI with no verifiable official distribution evidence, and REST examples that reportedly do not match the service's official documentation. This looks more like inaccurate or overstated integration guidance than confirmed malware, but it carries medium supply-chain and reliability risk.

Confidence: 90%Severity: 53%
Audit Metadata
Analyzed At
Apr 18, 2026, 03:40 AM
Package URL
pkg:socket/skills-sh/ckorhonen%2Fclaude-skills%2Fsubway-info%2F@70cbd507929b82e0ea6ec2e7cb0a5cddafa94bce