skills/cylqwe7855-alt/personal-wiki/wiki/Socket

wiki

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its install path is not proportionate to the sensitivity of the data it handles. It asks the agent to clone and run an unverified personal GitHub project, then install and execute its dependencies before processing private notes and documents; that makes this a high supply-chain risk even without explicit exfiltration behavior.

Confidence: 87%Severity: 83%

Audit Metadata

Analyzed At

Apr 9, 2026, 10:02 AM

Package URL

pkg:socket/skills-sh/cylqwe7855-alt%2Fpersonal-wiki%2Fwiki%2F@dc09474e721969b2b969e55114a2d45e66c8ff42