skills/a-canary/arc-skills/to-spec/Socket

to-spec

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core behavior fits the stated purpose, but the skill relies on transitive installation/setup of another skill and performs autonomous external posting to an issue tracker. No direct malware indicators or credential-exfiltration flow are present in this file, but the trust chain and external write action make it moderately risky.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Aug 27, 2026, 01:03 AM

Package URL

pkg:socket/skills-sh/a-canary%2Farc-skills%2Fto-spec%2F@305911f9a65016bf31b209ade13da492042e3ebe1434db4161a777a4efc69dbb