message-broker

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (TCP-based pub/sub broker for IPC between Python, AHK, and Qt clients) is coherent with its described architecture, protocol, and client/server interactions. There are no evident external dependencies or credential requirements, and data flows remain on localhost between well-defined components. Minor concerns include lack of explicit authentication and input validation details, but these do not intrinsically break the alignment with a local IPC broker. Overall, the footprint is proportionate to the stated purpose and does not exhibit concerning data exfiltration or supply-chain risks.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 03:18 AM
Package URL
pkg:socket/skills-sh/ds-codi%2Fproject-memory-mcp%2Fmessage-broker%2F@8eab662547b720580249de8d91d6debd4f98b208