chip-specs

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
rules/flow-chip-identify.md

The fragment is primarily a chip-identification workflow and contains no direct malware payload. However, it includes a high-impact instruction to modify user-scoped Claude MCP configuration and connect to an external server when a tool is unavailable. That behavior should require explicit user approval and independent verification of the endpoint and server provenance. Treat the MCP setup directive as a supply-chain and prompt-injection risk; the supplied text alone does not establish malicious intent by the server.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:09 AM
Package URL
pkg:socket/skills-sh/chipctx%2Fskills%2Fchip-specs%2F@870f70df68f69121cb5180c196e39d6b13b4b052df154632a38f1bb7e39f061b
Security Audit — socket — chip-specs