skills/akillness/jeo-skills/lazyweb/Socket

lazyweb

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose and data flows mostly align with design research, and its endpoints are same-service Lazyweb domains rather than obvious third-party interception. The main concern is the unpinned curl|bash installer plus transitive skill installation/configuration behavior, which creates medium supply-chain risk without clear evidence of malicious intent.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jul 10, 2026, 07:52 AM

Package URL

pkg:socket/skills-sh/akillness%2Fjeo-skills%2Flazyweb%2F@eb9f5ba3a702cad467b684a132c46bf9187c228029ce05d41f1fc965033acce6