hola-poke-yeoksam
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is mostly aligned with its stated food-info and raffle purpose, but it relies on an unverifiable remote MCP service on shared hosting and sends phone numbers there. No clear malware or covert behavior is present, yet the PII flow and weak endpoint provenance make it higher risk than a normal documentation-only food skill.
Confidence: 85%Severity: 58%
Audit Metadata