skills/andiedie/skills/install-skills/Socket

install-skills

Warn

Audited by Socket on Jul 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose and uses an apparently official `npx skills` CLI, but its purpose is to install other skills from potentially untrusted third-party sources. The main risk is transitive supply-chain trust, not credential theft or hidden exfiltration.

Confidence: 90%Severity: 68%

Audit Metadata

Analyzed At

Jul 13, 2026, 06:02 AM

Package URL

pkg:socket/skills-sh/Andiedie%2Fskills%2Finstall-skills%2F@8c468e5b2f94b52db70a1191a3381cef08ee652b1ad975a5c25e42d6fe1f4699