skills/cloudvoyant/codevoyant/mem-index/Socket

mem-index

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill's stated function is simple and proportionate, but its only action is to execute an unpinned `npx` package whose provenance could not be verified from the provided evidence. This is mainly a supply-chain trust issue rather than clear malicious behavior or credential harvesting.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Mar 20, 2026, 11:51 PM

Package URL

pkg:socket/skills-sh/cloudvoyant%2Fcodevoyant%2Fmem-index%2F@9ee7451f5f4b12455884bfd1454544a78f569acb