extruct-api

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities align with its stated Extruct API purpose and its documented data flow appears to target first-party Extruct services, not a third-party gateway. However, it hinges on a bundled CLI whose provenance and public release verification were not established, so the main risk is execution trust and credential handling inside an opaque local tool rather than clear malicious behavior.

Confidence: 82%Severity: 63%
Audit Metadata
Analyzed At
Mar 13, 2026, 10:55 AM
Package URL
pkg:socket/skills-sh/extruct-ai%2Fskills%2Fextruct-api%2F@35944989d4025183a43de870d8b0c07fa9890e47