read

Warn

Audited by Socket on May 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill’s actual data flow is broader than necessary because it routes arbitrary URLs through third-party proxy services and relies on undisclosed helper commands. This looks more like a risky web-reading utility than malware, with the main concerns being proxy-mediated content exposure, opaque execution steps, and untrusted-content handling.

Confidence: 81%Severity: 61%
Audit Metadata
Analyzed At
May 7, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/ninehills%2Fskills%2Fread%2F@1b02edb25e4b1bd16635ab1c44f199bb8315e99b