skills/burnt-labs/xion-agent-toolkit/xion-dev/Socket

xion-dev

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly a benign Xion router, but its core behavior is transitive skill installation/loading into other repos and unpinned updates. There is no clear credential theft or exfiltration in this file, yet the trust expansion beyond this skill makes it medium risk.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Apr 7, 2026, 04:19 AM

Package URL

pkg:socket/skills-sh/burnt-labs%2Fxion-agent-toolkit%2Fxion-dev%2F@a536f4fa11f86362f23d995fb0d5898558dfabfe