advanced-skill-creator

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible skill is mostly a local meta-generator, but its purpose is to create additional executable skills and place them into marketplace-visible locations, which creates transitive trust risk. No direct credential theft or exfiltration is evident, and installer risk is limited to loosely versioned registry-based installation plus an unverified runtime-footprint mismatch from external listings.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Mar 31, 2026, 09:10 AM
Package URL
pkg:socket/skills-sh/agentient%2Fvibekit%2Fadvanced-skill-creator%2F@fdbcc5d875fe6998dfe7a1b57f0f63b68e166239
Security Audit — socket — advanced-skill-creator