reinforce-skills

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities mostly match its stated purpose of reinforcing agent memory, and the only executable dependency is the official Vercel/Next.js codemod via npm. However, it persistently rewrites CLAUDE.md with forceful behavioral directives, scans user-level Claude skill/plugin directories, and uses mutable remote npx execution, making it higher-risk than a normal documentation helper even without clear exfiltration or credential theft.

Confidence: 90%Severity: 50%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:41 AM
Package URL
pkg:socket/skills-sh/b-open-io%2Fprompts%2Freinforce-skills%2F@0e7db0a7d0380916929d84eb2d172003e824e272fdcfc1d24d90a9022cefdb2c