people-property

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s general purpose matches people/property lookup, but its footprint is riskier than necessary because it routes sensitive PII through a third-party gateway and relies on an unpinned `npx` CLI for paid requests. This looks more like a risky proxy/payment wrapper than a direct official Whitepages integration, so medium-high security risk is warranted without enough evidence for confirmed malware.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Mar 14, 2026, 04:49 PM
Package URL
pkg:socket/skills-sh/Merit-Systems%2Fagentcash-skills%2Fpeople-property%2F@b1146fd5547e1d043b865c40e9e8f1d2792723ae