upskill

Warn

Audited by Socket on Oct 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly coherent with its stated purpose, but it carries medium risk from curl|bash installation, optional transitive skill installation, and deliberate capture/forwarding of session logs to model APIs. The behavior fits an UpSkill wrapper, so this is not confirmed malware, but the trust and privacy footprint is significant.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Oct 28, 2026, 08:15 AM
Package URL
pkg:socket/skills-sh/akillness%2Fjeo-skills%2Fupskill%2F@9c798dc0b844e369abf518d2c7f68993db8bb0cd