skills/baekenough/oh-my-customcode/peer-messaging/Socket

peer-messaging

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated capability is coherent with the skill’s purpose, and data appears to remain local, but the install path is inconsistent and the broker provenance is weak. The main concern is supply-chain and trust expansion from instructing agents to install and register an external MCP server from an unverifiable publication path.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

May 15, 2026, 06:21 PM

Package URL

pkg:socket/skills-sh/baekenough%2Foh-my-customcode%2Fpeer-messaging%2F@f1b327d27008f7ee484c9f92b7213b5670d3e8c3