encrytion-decryption-toolkit

Warn

Audited by Socket on Jul 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as a hosted crypto toolkit and uses same-org AgentPMT infrastructure, but its core design requires sending highly sensitive cryptographic material and private keys to a remote service. That data flow is disproportionate for encryption/signing tasks and creates meaningful confidentiality risk. Transitive installation of additional setup skills adds moderate trust-chain risk, but there is no strong evidence of outright malware or deceptive publisher mismatch.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Jul 4, 2026, 04:51 AM
Package URL
pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fencrytion-decryption-toolkit%2F@a70f20571c1c9c4681295df8eee96802208f47b1bfed97d99497b0e4eea09efe