install-recommended-skills

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as an installer, but its actual function is to install other skills from a third-party personal repository, creating a transitive trust chain. The main concern is supply-chain and inherited-permission risk, not confirmed malware.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 17, 2026, 04:32 PM
Package URL
pkg:socket/skills-sh/atman-33%2Fatman-marketplace%2Finstall-recommended-skills%2F@832c7cc268ad2c24aad27ce8c812297ba19f9092013455560301d5a1c5646780