local-search
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, but its actual footprint relies on a third-party proxy and a wallet-backed external CLI rather than direct Google API access. Main concerns are intermediary data routing, unpinned remote execution via `npx ...@latest`, and small but real autonomous spending capability.
Confidence: 84%Severity: 62%
Audit Metadata