skills/4444j99/a-i--skills/fullstack-starter-pack/Socket

fullstack-starter-pack

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the bundle’s stated purpose is plausible, but its actual footprint is a transitive trust chain to six unspecified sub-skills. With no pinned provenance or integrity details, and evidence that similar skills are installed through floating third-party CLIs/GitHub URLs, the main risk is supply-chain exposure rather than confirmed malware.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Sep 27, 2026, 06:53 PM

Package URL

pkg:socket/skills-sh/organvm-iv-taxis%2Fa-i--skills%2Ffullstack-starter-pack%2F@4912e2ec35587bb8573f5f05e0abf458a360dc9b23aef81a18dcf6fc439a538a