find-skills

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches the capability, and the core CLI appears official, but this skill’s main function is to discover and install additional skills from potentially unverified third-party sources. That creates a transitive trust chain and broadens the agent’s effective permissions, especially with global non-interactive installs.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Aug 19, 2026, 07:47 PM
Package URL
pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Ffind-skills%2F@384d467b434e6d3882590ed4e3b975a5b020a0984c6fb77149f48abd0758bc47
Security Audit — socket — find-skills