skills/changhochien/oh-my-pi/pi-team/Socket

pi-team

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core orchestration behavior matches the stated purpose, but the installation provenance is inconsistent with surfaced official documentation and the skill delegates potentially sensitive project data to multiple unspecified provider CLIs without clear trust or auth guidance. This looks more like a supply-chain and scope/transparency problem than confirmed malware.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Aug 11, 2026, 02:23 AM

Package URL

pkg:socket/skills-sh/changhochien%2Foh-my-pi%2Fpi-team%2F@16b7f9bcc4b1398749f7c61890afb7419c9549acec564ad4c4f574b40b4a8f67