skills/bon5co/bermuda/bermuda-install/Socket

bermuda-install

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and file edits are coherent, but it instructs installation of another third-party skill from an unpinned personal GitHub repo, creating medium transitive-trust risk. No direct credential theft, covert behavior, or incompatible capabilities are evident in this skill itself.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Oct 26, 2026, 02:01 AM

Package URL

pkg:socket/skills-sh/bon5co%2Fbermuda%2Fbermuda-install%2F@d2499070faf759eb4120e9bc7249ef2956de68e4be55ecd54efe85c7e1d4be73