prophet-adversarial-auditor

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s overall purpose is coherent, but it uses an invasive browser-token extraction flow, handles multiple sensitive credentials, and persists results to external storage. No clear malicious exfiltration or unrelated endpoint is present, yet the auth/data-handling footprint is heavier than necessary and dependency trust cannot be fully verified from the provided material.

Confidence: 81%Severity: 56%
Audit Metadata
Analyzed At
Mar 21, 2026, 02:45 AM
Package URL
pkg:socket/skills-sh/serenorg%2Fseren-skills%2Fprophet-adversarial-auditor%2F@01d1dc505f70c06c9cbea3ffc1553b74b01c4925