skills/baekenough/oh-my-customcode/omcustom-improve-report/Socket

omcustom-improve-report

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill's behavior is narrowly aligned with a read-only reporting purpose and shows no credential use or external data routing, but it relies on an unverified local `eval-core` executable. The main concern is supply-chain trust in that required binary, not overt malicious behavior.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

May 15, 2026, 06:21 PM

Package URL

pkg:socket/skills-sh/baekenough%2Foh-my-customcode%2Fomcustom-improve-report%2F@41afb35cb821ea0fafafe79b5749dd2bf31d733a