prompt-engineering

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is mostly consistent with a prompt-engineering reference skill, but it also directs transitive installation of external skills through an unreviewed local installer. Because the installer behavior and some publisher relationships are not verifiable from the provided content, the main risk is supply-chain and inherited-permission trust rather than confirmed malicious behavior.

Confidence: 86%Severity: 69%
Audit Metadata
Analyzed At
Sep 19, 2026, 09:46 AM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fprompt-engineering%2F@fd378b980766a529b0e4a22866a9a925d10e36e79a557e4395439b5312fd14fe