skills/cofoundy/basalt-plugin/basalt/Socket

basalt

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The capability set mostly fits a document-publishing skill, and OAuth-based auth is proportionate. However, public verification is weak for the claimed Basalt/Cofoundy service domain, MCP tooling, and npm CLI identity, so install trust and endpoint provenance remain uncertain enough to classify this as suspicious rather than benign.

Confidence: 83%Severity: 56%

Audit Metadata

Analyzed At

Jul 23, 2026, 04:01 AM

Package URL

pkg:socket/skills-sh/cofoundy%2Fbasalt-plugin%2Fbasalt%2F@1c39d3ce4121c32fdc31e0899d4916545d4dca0598e5d34c4a3c7d661cde9238