saccoai-proposal

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with proposal generation, but it goes beyond local document creation by automatically invoking another skill and publishing proposal content to Vercel. The main risks are unpinned external tooling, a docs mismatch around `agent-browser`, and external hosting of client-facing data; these are medium-risk trust and data-flow concerns rather than confirmed malware.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Mar 27, 2026, 09:18 AM
Package URL
pkg:socket/skills-sh/saccoai%2Fagent-skills%2Fsaccoai-proposal%2F@25955c67bed069cc9dfc62404325f279d39e20ca