prism

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose is benign reasoning orchestration, but it requires transitive installation of a third-party skill bundle and asks for wildcard permissions that exceed what a pure analysis skill should need. The official `skills` CLI lowers installer-trust concern somewhat, yet the downstream repo and inherited broad permissions make the overall footprint medium-high risk.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:07 PM
Package URL
pkg:socket/skills-sh/argahv%2Fnovelty-skills%2Fprism%2F@3555bffa010059bc46f3fa8d7f3b242ef428b687efaac5e76898fb907714264e
Security Audit — socket — prism