say-hello

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill does almost nothing except redirect the agent to install a replacement skill from a personal throwaway repository. The CLI provenance is reasonably legitimate, but the transitive trust and unverified replacement source make the skill risky and not well-contained.

Confidence: 93%Severity: 72%
Audit Metadata
Analyzed At
Sep 24, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/craigmichaelmartin%2Ffake-skills%2Fsay-hello%2F@c116dcb1237c54e60f08983bfab9e3908cb7f1a825c3593e100b2378bf360fba