skills/canhassancode/skills/specifier/Socket

specifier

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core workflow is coherent for a spec-generation skill, and most named tools/endpoints are official or local. Main risks are executing repo-derived scripts based on untrusted ticket/review content and relying on an unverified local gauntlet validator path before publishing to GitHub; this is elevated workflow risk, not confirmed malware.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Sep 10, 2026, 02:35 PM

Package URL

pkg:socket/skills-sh/canhassancode%2Fskills%2Fspecifier%2F@64cbb86a5c6aa65664c436b9b3b0fac9b8f408626f46b8249fba74fe65e8349a