real-estate-debt-analysis

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (real estate debt analysis with multi-source price comparison and reporting) is broadly coherent with its implementation footprint (data ingestion, web data retrieval, analysis, and report generation). However, there are notable security considerations: external web data fetches introduce data flow that must be restricted to trusted sources, and environment-configured endpoints present potential trust and data-leak vectors. The tool relies on standard Python data processing libraries, but lacks explicit input sanitization and explicit data-at-rest protections in the description. Overall, the footprint is plausible for its purpose but warrants moderate security hardening (validated sources, restricted logs, explicit consent, and secured report handling).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 04:56 AM
Package URL
pkg:socket/skills-sh/yejinlei%2Freal-estate-debt-analysis-skill%2Freal-estate-debt-analysis%2F@f65c0e90474275ccf62398a70473d34ccd5c30a5