app-store-screenshots

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill is not self-contained and asks the agent to install another skill and optionally more related skills, creating transitive trust. The CLI and installer appear to be official inference.sh ecosystem components rather than an obvious malicious third party, so this is not confirmed malware; risk is mainly supply-chain exposure and credential/file forwarding through the external CLI.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Sep 16, 2026, 05:20 PM
Package URL
pkg:socket/skills-sh/aiskillstore%2Fmarketplace%2Fapp-store-screenshots%2F@7dcf45b9be064919eb71a81039121a76d67d25f0756789745f8c84faca2e3341