web-research
Warn
Audited by Socket on Apr 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the research/scraping purpose is coherent, but the actual footprint relies on an unpinned external CLI and routes all requests through stableenrich.dev rather than official Exa/Firecrawl endpoints. This creates medium-high supply-chain, intermediary data-flow, and prompt-injection risk without evidence of confirmed malware.
Confidence: 84%Severity: 68%
Audit Metadata