skills/alwaysmeticulous/skills/meticulous-cli-update/Socket

meticulous-cli-update

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

BENIGN with medium supply-chain risk. The skill's actions fit its stated purpose: checking and updating the Meticulous CLI, auth, and related skills. Main concerns are unpinned `@latest` installs and especially transitive skill installation through the third-party `skills` CLI using an unpinned GitHub repo source. No evidence of credential exfiltration, unrelated access, or malicious data routing.

Confidence: 89%Severity: 62%

Audit Metadata

Analyzed At

Oct 5, 2026, 07:59 PM

Package URL

pkg:socket/skills-sh/alwaysmeticulous%2Fskills%2Fmeticulous-cli-update%2F@1bba3b03ccf2b1a22ee80811c0f6e8bb49e74828b0bc4a84becd367b02f20ef4