update-windows

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s behavior mostly matches its stated Windows-maintenance purpose and does not show credential theft or covert exfiltration. The main concerns are broad elevated software-update authority, dependency on many external vendor installers through winget, and automatic installation of a third-party PowerShell module with admin rights, which makes the skill higher-risk than a simple documentation or single-tool workflow.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 30, 2026, 11:34 AM
Package URL
pkg:socket/skills-sh/bengous%2Fagents-skills%2Fupdate-windows%2F@79cd498867e17ec66c5d5427c111c20ab3c1c96bf31779ff87876c712f529e81