skills/affaan-m/ecc/configure-ecc/Socket

configure-ecc

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s actions mostly match its installer purpose, but it bootstraps and installs many downstream skills from a third-party personal GitHub repository, creating meaningful supply-chain and transitive-trust risk. No clear credential theft, exfiltration, or hidden execution is evident in the provided content.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

May 19, 2026, 06:52 AM

Package URL

pkg:socket/skills-sh/affaan-m%2FECC%2Fconfigure-ecc%2F@308c5cbb3428aa1a5a35ed029f628a0cca1291f9