skills-management

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the router itself is compact and purpose-aligned, but it explicitly promotes installing external skills through an unseen local installer, creating medium-high transitive supply-chain risk. No direct credential theft or malicious data flow is visible in this snippet, so this is not confirmed malware.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Jul 5, 2026, 04:25 PM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fskills-management%2F@47509cebc027fc9125972d8f4a731e1eea4efd7db1c9263345b67bf30d7e0689
Security Audit — socket — skills-management