openkakao-cli

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with a KakaoTalk automation CLI, but it enables high-risk autonomous actions, arbitrary hook-command execution, and optional external webhook delivery of chat data. This is not clearly malicious, yet its operational footprint is powerful enough that misuse or unsafe automation could cause message exfiltration or unintended actions.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 2, 2026, 12:01 AM
Package URL
pkg:socket/skills-sh/JungHoonGhae%2Fskills%2Fopenkakao-cli%2F@ab7bd8b190329f39bba68ee51db5d2eccc03530e