skills/channelerh/codex-skin-packs/codex-skin-pack-installer/Socket

codex-skin-pack-installer

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The capability fits a skin-pack installer and there is no sign of credential theft or exfiltration, but the skill relies on a third-party, unofficial GitHub release source for downloaded assets with unclear validation details. Risk is mainly supply-chain and provenance related, not confirmed malicious behavior.

Confidence: 86%Severity: 52%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:40 AM

Package URL

pkg:socket/skills-sh/ChannelerH%2Fcodex-skin-packs%2Fcodex-skin-pack-installer%2F@3b1942279f8f0e7d0acb2bba5887e858a3b186c168dc2e5a0b56a1583205041d