Swagger Codegen Orchestrator

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent and there is no evidence of credential theft or unrelated capabilities, but the skill mainly instructs transitive installation through external CLIs. The `npx skills add` path is unpinned and relies on a third-party-maintained installer, making this a medium supply-chain and trust-chain risk rather than benign documentation.

Confidence: 90%Severity: 61%
Audit Metadata
Analyzed At
Sep 27, 2026, 04:12 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fswagger-codegen-orchestrator%2F@7fc80c375cf9698d5092c1560e252ec050904549