granola-auth
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and official Granola network destinations are broadly coherent, but trust is weakened by reliance on an unverifiable local installer/helper (`install.sh` -> `auth.js`) that is not the documented public setup path. Main risk is credential handling and installer provenance, not confirmed malware or third-party exfiltration.
Confidence: 84%Severity: 62%
Audit Metadata