chofex-hackathon

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is broadly aligned with hackathon participation, but its footprint is high-risk: it can install and run a mutable CLI, handle sensitive personal data, and perform real-world submissions and public/organizational posting on the participant's behalf. The main concern is excessive autonomous authority and supply-chain trust, not confirmed malware or covert exfiltration.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Oct 19, 2026, 04:12 AM
Package URL
pkg:socket/skills-sh/cuevaio%2Fhack-the-andes%2Fchofex-hackathon%2F@d2231f9be207a95b81665b0325dc82e29ccbbe4fb2094d263ea80931e2a2adb6