write-a-skill

Warn

Audited by Socket on Aug 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely benign documentation for authoring agent skills, but it ends with an unverifiable external command (`setup-roblox-skills`) that lacks provenance, install instructions, or official documentation. That inconsistency raises supply-chain and transitive-trust concerns, though there is no direct evidence of credential theft, exfiltration, or overtly malicious behavior.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Aug 2, 2026, 01:17 AM
Package URL
pkg:socket/skills-sh/AshExplained%2Froblox-skills%2Fwrite-a-skill%2F@269f29c16458c812f0e578f0ace3c1ab8ae3116c63b111bacd7cdb3d3b6588bd