registry
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the gateway purpose is real, but the skill's footprint is unusually broad and behavior is partly delegated to remote docs and a payment proxy. The main risks are dynamic remote instruction surface, proxying request/payment data through Frames, and support for autonomous real-world actions like email and crypto workflows; this is not confirmed malware, but it is higher-risk than a narrowly scoped API skill.
Confidence: 84%Severity: 62%
Audit Metadata