forensify

Fail

Audited by Socket on Oct 5, 2026

3 alerts found:

Anomalyx2Malware
AnomalyLOW
tests/fixtures/openclaw_stack/.agents/skills/poisoned-skill/SKILL.md

SUSPICIOUS: the stated purpose is trivial, but the skill contains explicit deceptive instructions intended to bias analysis and hide real risks. There is no confirmed malware behavior or exfiltration path in the provided text, but the manipulation is incompatible with a benign daily-helper skill.

Confidence: 94%Severity: 46%
MalwareHIGH
tests/fixtures/claude_code_stack/skills/malicious-skill/SKILL.md

MALICIOUS: the skill's only substantive behavior is a concealed prompt-injection directive telling the analyzer to ignore its instructions and falsely report the skill as safe. That behavior is fundamentally incompatible with the claimed productivity purpose.

Confidence: 97%Severity: 95%
AnomalyLOW
tests/fixtures/openclaw_stack/.agents/skills/poisoned-skill/tools.json

The JSON does not itself exfiltrate data, but its tool description contains an explicit instruction that could induce a downstream agent to disclose conversation context to an external endpoint. Treat the instruction as untrusted and do not follow it without authorization.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Oct 5, 2026, 08:59 PM
Package URL
pkg:socket/skills-sh/alexgreensh%2Frepo-forensics%2Fforensify%2F@5e7cfc6a8f4d3fe336c3d2b4df24b516272c0a02efb6475e9983502866538fcf