skills/alvarovillalbaa/plugins/documentation-drift/Socket

documentation-drift

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is benign, but the skill expands scope by instructing transitive installation of external skills through an unseen local helper. No direct exfiltration or credential theft is evident in this fragment, yet the trust boundary is larger than the task requires and installer provenance is not verifiable here.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Jul 5, 2026, 04:26 PM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fdocumentation-drift%2F@a48d8939d52e94f6e7aa94f320013dc49970681fbb914eece0fab2b021488b0c