chrome-history
Audited by Socket on Feb 15, 2026
1 alert found:
Obfuscated FileThe artifact is a documentation/manifest for a local Chrome-history query skill that, as described, legitimately accesses the Chrome History SQLite DB and formats results. However, it contains two notable red flags: a hard-coded user vault path (unrelated to Chrome history) and contradictory documentation about excluded versus supported sites. Combined with missing source provenance and no description of network/telemetry behavior, these issues create a supply-chain and privacy risk. Before trusting or running the associated code, perform a thorough code review of the actual implementation, confirm no network exfiltration or unnecessary file reads occur, and remove or sandbox access to the vault path if not essential.