extruct-api
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities align with its stated Extruct API purpose and its documented data flow appears to target first-party Extruct services, not a third-party gateway. However, it hinges on a bundled CLI whose provenance and public release verification were not established, so the main risk is execution trust and credential handling inside an opaque local tool rather than clear malicious behavior.
Confidence: 82%Severity: 63%
Audit Metadata