skills/adryanmoldokkr32-pixel/bionicbot-giant-sovereign-skills/hf-supply-chain-algo/Socket

hf-supply-chain-algo

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent at a high level, but the skill is underspecified while enabling autonomous, high-impact real-world actions based on scraped untrusted data. Main risk is operational autonomy and indirect prompt-injection, not confirmed malware or credential theft.

Confidence: 86%Severity: 64%

Audit Metadata

Analyzed At

Apr 19, 2026, 05:40 AM

Package URL

pkg:socket/skills-sh/adryanmoldokkr32-pixel%2Fbionicbot-giant-sovereign-skills%2Fhf-supply-chain-algo%2F@4ec62326879b27b6f20e4b8192de5d41a4ea1a3b