skills/baekenough/baekenough-skills/scout/Socket

scout

Warn

Audited by Socket on Apr 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s core behavior is mostly aligned with its stated purpose, but it combines third-party transitive installation from a personal repo with arbitrary web-content ingestion and GitHub issue creation. Main concerns are supply-chain trust and prompt-injection-driven issue generation, not confirmed malware.

Confidence: 84%Severity: 61%

Audit Metadata

Analyzed At

Apr 5, 2026, 12:25 AM

Package URL

pkg:socket/skills-sh/baekenough%2Fbaekenough-skills%2Fscout%2F@7a239187999523f388657d2ad11b22307fc27fbe