shaders

Fail

Audited by Socket on Apr 1, 2026

1 alert found:

Malware
MalwareHIGH
.clawnet/unsigned-skill.json

This fragment is highly opaque and packaged with embedded manifest-like metadata and shader/TSL-themed content, but it also contains extensive explicit claims and staged behavioral descriptions consistent with malicious intent (sabotage/stealth/backdoor-like control, resource-abuse themes, and potential data theft/exfiltration/process/filesystem misuse). Concrete runtime sink invocations are not directly verifiable from this truncated/encoded fragment, so exact malware mechanics cannot be confirmed here; however, the risk signal is high and warrants immediate deeper inspection and sandboxed execution tracing before trust/use.

Confidence: 95%Severity: 85%
Audit Metadata
Analyzed At
Apr 1, 2026, 02:34 PM
Package URL
pkg:socket/skills-sh/b-open-io%2Fprompts%2Fshaders%2F@bf8312744fe0869f5e0057382765c095c74f5fbb