skills/liangdabiao/social_research_agent/deep-research/Socket

deep-research

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core research workflow is mostly coherent, but the skill expands its footprint by directing the agent to use an external helper skill and third-party TikHub API for social-media research. That transitive dependency and third-party data routing are not well-scoped for a generic research orchestrator and materially increase supply-chain and data-flow risk.

Confidence: 85%Severity: 74%

Audit Metadata

Analyzed At

Mar 15, 2026, 01:16 PM

Package URL

pkg:socket/skills-sh/liangdabiao%2Fsocial_research_agent%2Fdeep-research%2F@c38913b0d9163ab3a21475e83a25a1df857557ea