private-data-verification

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is plausible, but its actual flow sends raw private data through an external CLI and remote provider while marketing the process as privacy-preserving verification. The install source and provider relationship are not clearly explained, and the data flow is broader than the zero-knowledge wording suggests.

Confidence: 79%Severity: 64%
Audit Metadata
Analyzed At
Apr 7, 2026, 04:39 PM
Package URL
pkg:socket/skills-sh/cybercentry%2Fcybercentry-agent-skills%2Fprivate-data-verification%2F@e2c1f4a77bbda65de0336445fa617fbcff887743