playbook-cybersecurity-appsec-baseline

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as an AppSec playbook, but it mainly functions as a launcher for three external skills. Because it creates a transitive trust chain to unpinned content from a personal GitHub repo via the skills CLI, the main concern is medium supply-chain/trust expansion rather than confirmed malware or credential theft.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Oct 1, 2026, 02:51 PM
Package URL
pkg:socket/skills-sh/aniruddhaadak80%2Fskills%2Fplaybook-cybersecurity-appsec-baseline%2F@35a5b5bad18be7d7bd9796042a6242bdc67555adfd25fdd152c1f4437539b570