skills/agentskillexchange/skills/ESLint Rule Enforcer/Socket

ESLint Rule Enforcer

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is a local ESLint helper, but the skill asks for broad remote-auth capabilities and is installed through an unverified third-party skill repository unrelated to the claimed ESLint source. The main risk is transitive supply-chain trust plus disproportionate credential and network language, not confirmed malware.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

Mar 28, 2026, 06:45 PM

Package URL

pkg:socket/skills-sh/agentskillexchange%2Fskills%2Feslint-rule-enforcer%2F@041df62d415a60dfc11d56e9f0ae158369acc849