skills/bleedingdev/agentic-security-workspace/mobsf/Socket

mobsf

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose is coherent for mobile security analysis, but its core execution path hinges on an unverified `mobsf-agent` CLI that is not tied to official MobSF distribution in the provided evidence. Data flow otherwise looks local and proportionate, so this is high supply-chain risk rather than confirmed malware.

Confidence: 85%Severity: 82%

Audit Metadata

Analyzed At

Oct 2, 2026, 12:19 PM

Package URL

pkg:socket/skills-sh/bleedingdev%2Fagentic-security-workspace%2Fmobsf%2F@46701ba80147d3e73f019e0120a3a1b582353de6619f6e774564f629abedb499