skills/terrylica/cc-skills/interactive-bot/Socket

interactive-bot

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent for a Gmail-via-Telegram bot, and the visible dependency footprint is mostly proportionate. Risk comes from autonomous email actions plus AI routing over untrusted Telegram/email content with Bash available, and from missing visibility into the referenced bot script's actual network behavior.

Confidence: 78%Severity: 69%

Audit Metadata

Analyzed At

Apr 4, 2026, 09:57 AM

Package URL

pkg:socket/skills-sh/terrylica%2Fcc-skills%2Finteractive-bot%2F@4547865b25714b43efd4bebe5ea9c7f9fa1e75cf