skills/canhassancode/skills/to-spec/Socket

to-spec

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: Purpose and capabilities mostly align, but the skill enables autonomous external publication using broad internal context and an undefined bootstrap dependency. Primary risk is unintended disclosure or unwanted issue creation, not confirmed malware.

Confidence: 83%Severity: 52%

Audit Metadata

Analyzed At

Jul 8, 2026, 05:52 PM

Package URL

pkg:socket/skills-sh/canhassancode%2Fskills%2Fto-spec%2F@c6e26e50058ccf0516aaf7883a70c9f7a5ccdba427feed792c7da8c184087800