fine-dust-location

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is simple fine-dust lookup, but it requires routing user location queries through a third-party proxy as the mandatory default path instead of the official AirKorea API. No credential theft or execution behavior is shown, so this is not confirmed malware, but the intermediary data flow is unnecessary and raises medium security concern.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 28, 2026, 03:01 PM
Package URL
pkg:socket/skills-sh/NomaDamas%2Fk-skill%2Ffine-dust-location%2F@ed3526b9df32c1868b5969d8ad4d43c0f2111434
Security Audit — socket — fine-dust-location