learning

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the router itself is compact and aligned to learning/lesson delegation, but it instructs transitive installation of external skills through an unverifiable local installer script. No direct malicious behavior or exfiltration is shown in this file, yet the install path expands trust beyond the stated routing role and warrants medium risk.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 5, 2026, 04:26 PM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Flearning%2F@7265df14d2389a8014337fbdc828aaf34be4eaf37777540de350c4775bf165f2