skills/ckorhonen/reflect/reflect-skills/Socket

reflect-skills

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core log-scanning and local skill-tuning behavior fits the stated purpose, but the skill also instructs transitive installation of third-party skills through an external CLI. That creates a meaningful supply-chain and prompt-injection risk despite otherwise coherent scope and privacy guidance.

Confidence: 88%Severity: 66%

Audit Metadata

Analyzed At

Jul 27, 2026, 03:07 AM

Package URL

pkg:socket/skills-sh/ckorhonen%2Freflect%2Freflect-skills%2F@c69c755295e54ee1186dc45fb8adc16bafcbb15d50db460e1b6f317f52ba9054