skills/sieteunoseis/grocer-cli/kroger-search/Socket

kroger-search

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but its core dependency and authentication flow are not verifiably tied to Kroger or the skill author. Requiring users to install an unclear third-party CLI and log in through it creates meaningful supply-chain and credential-forwarding risk without enough provenance evidence.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

Mar 23, 2026, 07:27 PM

Package URL

pkg:socket/skills-sh/sieteunoseis%2Fgrocer-cli%2Fkroger-search%2F@0fac8514a2d03321721492ca5ace5776e1cd7453