claude-code-skill

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core capabilities match a Claude Code orchestration skill, so this is not fundamentally deceptive, but it enables broad autonomous execution and optional third-party proxy credential forwarding. Main concerns are high operational risk, indirect prompt-injection exposure, and unverifiable/personal-repo provenance for the surrounding ecosystem rather than confirmed malware.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Aug 19, 2026, 07:50 PM
Package URL
pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Fclaude-code-skill%2F@5c2614b8492340c6b4b8b0de7b9d8b87ef68a4c7f3483ecba041052bf730d3f3
Security Audit — socket — claude-code-skill