mgrep-code-search

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core capability mostly matches the stated purpose, and install provenance is relatively coherent, but the skill understates a key data-flow fact: `mgrep watch` uploads/indexes repository content with a remote Mixedbread service rather than performing purely local search. This makes the skill higher risk than a normal code-search helper, though not malicious based on the available evidence.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/intellectronica%2Fagent-skills%2Fmgrep-code-search%2F@f91de7912e85a8eff403b25a96102a678050c4741f43fd445519a343456b293e
Security Audit — socket — mgrep-code-search