skills/aniruddhaadak80/skills/application-security-secure-code-review/Socket

application-security-secure-code-review

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated purpose is coherent and the checklist itself is benign for an AppSec review skill, but it instructs installation of a third-party personal-repo skill through the Skills CLI with unpinned trust. This is primarily a transitive-trust and supply-chain exposure, not confirmed malware or credential theft.

Confidence: 91%Severity: 50%

Audit Metadata

Analyzed At

Oct 1, 2026, 02:51 PM

Package URL

pkg:socket/skills-sh/aniruddhaadak80%2Fskills%2Fapplication-security-secure-code-review%2F@e220be903385551f9f049fc253132a1359a9acd5f1d7317fd2432a230125ed40