omni-content-explorer
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileThe Omni Content Explorer skill is coherent with its stated purpose: it provides authenticated REST API interactions to discover, enumerate, filter, and download content artifacts. Data flows are straightforward (API key + base URL → REST calls → responses → user-facing results). No unauthorized downloads, no suspicious data exfiltration, and no credential-forwarding to unknown third-party services are evident. The primary security considerations are proper handling of API keys (least privilege, rotation, and secure storage), ensuring access controls for content visibility, and validating user-provided identifiers before making requests. Overall verdict: BENIGN with moderate operational risk due to credential handling and exposure of content metadata; no evidence of malicious behavior or inappropriate external data flows.