ESLint Config Enforcer

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated ESLint-focused purpose is plausible, but the actual installation path relies on a third-party skill registry and a publisher/source mismatch (`agentskillexchange/skills` vs `eslint/eslint`). The main risk is transitive install trust and weak provenance, not confirmed malicious behavior.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Mar 28, 2026, 06:44 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Feslint-config-enforcer%2F@968a956ceb630701735fe06ed0a6e54e5ffc3177