analytics-insights

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The fragment describes a browser-based analytics toolkit intended to operate entirely within the user’s browser without API keys or external services. Its capabilities (scraping publicly visible X data, in-browser analysis, and JSON export) align with the stated purpose. Security-wise, the footprint is low-risk in terms of external exfiltration, but there are privacy considerations around in-browser data collection and automatic exports. Overall risk is moderate but consistent with a client-side analytics tool; no evidence of malicious behavior or supply-chain manipulation is present in the provided fragment.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 09:54 AM
Package URL
pkg:socket/skills-sh/nirholas%2FXActions%2Fanalytics-insights%2F@4f94240e95b8f121cfe186bbc49fd45290721db8