skills/burnt-labs/xion-agent-toolkit/xion-toolkit-init/Socket

xion-toolkit-init

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated purpose broadly matches Xion setup, but its footprint includes remote installer execution and transitive installation of another skill. The same-org GitHub sources make this more consistent than overtly malicious, yet the curl|sh/iex pattern and expanded trust chain raise medium security risk.

Confidence: 78%Severity: 58%

Audit Metadata

Analyzed At

Mar 25, 2026, 03:12 PM

Package URL

pkg:socket/skills-sh/burnt-labs%2Fxion-agent-toolkit%2Fxion-toolkit-init%2F@89beca0e752362cac822edb889ae19d4f5eb9415