granola-auth

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and official Granola network destinations are broadly coherent, but trust is weakened by reliance on an unverifiable local installer/helper (`install.sh` -> `auth.js`) that is not the documented public setup path. Main risk is credential handling and installer provenance, not confirmed malware or third-party exfiltration.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Mar 23, 2026, 08:26 AM
Package URL
pkg:socket/skills-sh/skippednote%2Fgranola-skill%2Fgranola-auth%2F@b8075df1b111c2abe41aa7b1c2063206e565fca1