chrome-history

Fail

Audited by Socket on Feb 15, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The artifact is a documentation/manifest for a local Chrome-history query skill that, as described, legitimately accesses the Chrome History SQLite DB and formats results. However, it contains two notable red flags: a hard-coded user vault path (unrelated to Chrome history) and contradictory documentation about excluded versus supported sites. Combined with missing source provenance and no description of network/telemetry behavior, these issues create a supply-chain and privacy risk. Before trusting or running the associated code, perform a thorough code review of the actual implementation, confirm no network exfiltration or unnecessary file reads occur, and remove or sandbox access to the vault path if not essential.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 15, 2026, 09:36 PM
Package URL
pkg:socket/skills-sh/glebis%2Fclaude-skills%2Fchrome-history%2F@502824d2038e2b1d4eb846e43d487aecbff08efb