skills/chenqg618/compliance-skills/ap-aging-plan-check-free/Socket

ap-aging-plan-check-free

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the free skill itself is mostly coherent and appears local-only, but it also contains explicit upgrade instructions that install another skill via unpinned `npx` and route the user into a transitive SkillPay purchase flow. Same-org Alipay evidence lowers concern from malicious to medium-risk supply-chain/transitive-trust exposure.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Sep 16, 2026, 11:29 AM

Package URL

pkg:socket/skills-sh/chenqg618%2Fcompliance-skills%2Fap-aging-plan-check-free%2F@ebdabe4069ef136c4ddffa0b243f92a0ada220a94c38eac28a60af36e3f97137