message-broker
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's stated purpose (TCP-based pub/sub broker for IPC between Python, AHK, and Qt clients) is coherent with its described architecture, protocol, and client/server interactions. There are no evident external dependencies or credential requirements, and data flows remain on localhost between well-defined components. Minor concerns include lack of explicit authentication and input validation details, but these do not intrinsically break the alignment with a local IPC broker. Overall, the footprint is proportionate to the stated purpose and does not exhibit concerning data exfiltration or supply-chain risks.
Confidence: 98%
Audit Metadata