skills/alvarovillalbaa/plugins/flake/Socket

flake

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated CI-debug purpose is coherent, but the skill expands trust by directing installation of external skills through an unreviewed local installer script. The main risk is transitive skill installation and unverifiable downstream provenance, not confirmed malware.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Sep 19, 2026, 09:46 AM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fflake%2F@7ece391d0d9ca40b41043d33a5adf71d04247ae95844136a145e8c4745007565