k7-total-security-configuration

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the trust chain is not: a security configuration skill anchors itself to an unofficial personal 'unlock/patch' repo and then routes admin auth material and operational control through that unverifiable toolset. This makes the skill high risk even without explicit proof of exfiltration.

Confidence: 91%Severity: 89%
Audit Metadata
Analyzed At
Jul 8, 2026, 04:51 AM
Package URL
pkg:socket/skills-sh/aradotso%2Fsecurity-skills%2Fk7-total-security-configuration%2F@d762e9002dadedc9db4f78d26260018e1e63bf8c0e40cb09e4a44502363492d6
Security Audit — socket — k7-total-security-configuration