skills/aeondave/malskill/dex2jar/Socket

dex2jar

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent and shows no exfiltration or credential abuse, but it equips an AI agent for Android reverse engineering, which is a high-risk offensive-security capability. Supply-chain risk is limited to unpinned external-tool reliance, not confirmed malicious behavior.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Sep 5, 2026, 10:44 PM

Package URL

pkg:socket/skills-sh/aeondave%2Fmalskill%2Fdex2jar%2F@192a1a776909bbbfb8a12ba12b89c1a1edf12543255669edb4aad8194c6db813