estimate-all

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and behavior are mostly coherent and read-only, but it depends on an ambiguously named external `lc` CLI with unclear provenance from the skill text. No malicious data flow is evident, yet the undocumented third-party tool dependency raises medium supply-chain risk.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:37 AM
Package URL
pkg:socket/skills-sh/cerico%2Fmacfair%2Festimate-all%2F@5bf6d9ddb3dcd62953328ac7a8633dda4eb6afea95f8e5ce6c02e1d258671b03