toolify

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, and most endpoints/installers are official, but it materially expands trust by invoking external CLIs, handling live secrets, and delegating to another skill/tooling layer. Risk is driven more by credential forwarding and transitive trust than by clear malicious behavior.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Jul 11, 2026, 09:46 PM
Package URL
pkg:socket/skills-sh/coreyhaines31%2Fmakerskills%2Ftoolify%2F@7334edbc3ce994381a7234228faa423f2f4d984e032ca393862033f6385541f7
Security Audit — socket — toolify