fine-dust-location

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is simple fine-dust lookup, but it requires routing user location queries through a third-party proxy as the mandatory default path instead of the official AirKorea API. No credential theft or execution behavior is shown, so this is not confirmed malware, but the intermediary data flow is unnecessary and raises medium security concern.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 28, 2026, 03:01 PM
Package URL
pkg:socket/skills-sh/NomaDamas%2Fk-skill%2Ffine-dust-location%2F@ed3526b9df32c1868b5969d8ad4d43c0f2111434