simplify

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The skill's refactoring purpose is coherent, but it unnecessarily depends on installing a second skill from an unverified third-party GitHub repository via a transitive `npx skills add` chain. The main risk is supply-chain and inherited trust, not confirmed malware or credential theft.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 01:18 PM
Package URL
pkg:socket/skills-sh/alexandru%2Fskills%2Fsimplify%2F@047e5c7ef1de3cb2e96e1289bce0a3d09c5600e7eecd69df8fe243b8d28d553b