sexchathu-downloader

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose and capabilities are broadly aligned for a site-specific downloader, but the trust model is weak because users are asked to sideload a proprietary extension build from GitHub Releases without clear artifact verification or source-level auditability. No direct credential theft or off-platform proxying is evident from the provided text, but the unverifiable extension package makes the overall security risk high.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:14 PM
Package URL
pkg:socket/skills-sh/serpdownloaders%2Fskills%2Fsexchathu-downloader%2F@970bfb94a959d94b62cfece888430fb7a9dcab1d