local-tools

Warn

Audited by Socket on Feb 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The Local Tools Skill local-tools is coherently designed for local calendar management with platform-native integrations and structured JSON outputs. The primary security considerations are user consent and OS-level permissions for calendar access. There are no evident external data leaks or network-based malicious activities in the provided fragment; however, rigorous handling of permission prompts and diligent minimization of output exposure (e.g., logs) are recommended.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 27, 2026, 07:23 AM
Package URL
pkg:socket/skills-sh/netease-youdao%2FLobsterAI%2Flocal-tools%2F@65ab2a76f462d3a98c5947fe0ff87207a6e84a8b