skills/cristiano-pacheco/ai-tools/ai-setup-skills/Socket

ai-setup-skills

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core repo-setup behavior is coherent and the GitHub/GitLab/Obsidian/local modes look proportionate, but the optional Workplan branch introduces an unverifiable external CLI/skill trust chain and real tracker mutations. Main risk is supply-chain/install trust, not confirmed malware.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Oct 5, 2026, 01:25 PM

Package URL

pkg:socket/skills-sh/cristiano-pacheco%2Fai-tools%2Fai-setup-skills%2F@3be34322ec6043302835d1f18a64a16cc773ff0bb576f26f87a8bf3694f00cef