learning

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the router itself is compact and aligned to learning/lesson delegation, but it instructs transitive installation of external skills through an unverifiable local installer script. No direct malicious behavior or exfiltration is shown in this file, yet the install path expands trust beyond the stated routing role and warrants medium risk.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 5, 2026, 04:26 PM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Flearning%2F@7265df14d2389a8014337fbdc828aaf34be4eaf37777540de350c4775bf165f2
Security Audit — socket — learning