skills/bankai-skills/superpowers/python-sdk/Socket

python-sdk

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core Python SDK content and PyPI install path are coherent and low-risk, but the skill is over-scoped by instructing the agent to install additional skills—especially the cross-org `belt-sh/cli` skill—which is not necessary for a Python SDK guide. Main concern is transitive trust expansion rather than confirmed malware or credential theft.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Sep 14, 2026, 05:53 PM

Package URL

pkg:socket/skills-sh/bankai-skills%2Fsuperpowers%2Fpython-sdk%2F@f1f1d2c78942aa43a42ddb436223077b81c5963623a1c4ff40582b2b79b600e7