skills/alexandru/skills/refine/Socket

refine

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's refactoring purpose is coherent, but it expands trust by instructing the agent to install a second skill from an unpinned personal GitHub repository. The main issue is transitive trust and mutable supply chain, not confirmed malicious behavior or credential theft.

Confidence: 90%Severity: 76%

Audit Metadata

Analyzed At

Oct 12, 2026, 03:58 PM

Package URL

pkg:socket/skills-sh/alexandru%2Fskills%2Frefine%2F@bb8fb85b40a603fbada58ef0d70355716be4c6a9b502c4da8860128a1ad048f7