household-waste-info

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is simple public-information lookup, but the skill is mostly a loader for remote instructions and appears to route data through a publisher-controlled proxy rather than directly to official data.go.kr endpoints. Same-org npm/GitHub provenance reduces the chance of outright malware, but the remote-instruction design and proxy-mediated data flow are not proportionate to the claimed purpose.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Sep 17, 2026, 07:49 AM
Package URL
pkg:socket/skills-sh/nomadamas%2Fk-skill%2Fhousehold-waste-info%2F@b69eba3c5ee5a7ee5c454ca0cc1949de8186d702f85668990d31a12e9b1a5621
Security Audit — socket — household-waste-info