qveris-official

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with a broad aggregator purpose, and the QVeris domain/repo relationship looks legitimate. The main concern is proportionality and data-flow integrity: it centralizes many external searches and actions behind one intermediary API with auto-invocation, so user queries and execution parameters are brokered through QVeris rather than official service endpoints.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Mar 18, 2026, 02:29 AM
Package URL
pkg:socket/skills-sh/xiaonan0527%2Fopenclaw-stock-market-skills%2Fqveris-official%2F@56c362e21d24efc61710d878319bd9ddd7c9de44