skills/akillness/jeo-skills/jeo-skill/Socket

jeo-skill

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its behavior, but its main function is transitive installation of other skills from a personal GitHub repository via an external CLI, which creates meaningful supply-chain and trust-chain risk even without direct credential theft or overtly malicious behavior.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Aug 11, 2026, 01:23 PM

Package URL

pkg:socket/skills-sh/akillness%2Fjeo-skills%2Fjeo-skill%2F@693a7920430832b1ecca6e0e5067b506f71eabac56b716852c2bfac65df6d45d