hola-poke-yeoksam

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly aligned with its stated food-info and raffle purpose, but it relies on an unverifiable remote MCP service on shared hosting and sends phone numbers there. No clear malware or covert behavior is present, yet the PII flow and weak endpoint provenance make it higher risk than a normal documentation-only food skill.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 18, 2026, 03:07 AM
Package URL
pkg:socket/skills-sh/NomaDamas%2Fk-skill%2Fhola-poke-yeoksam%2F@65ee30e945795d7065eb6792d72beeac18e797fa