skills/darkmatter/skills/darkmatter-repo-setup/Socket

darkmatter-repo-setup

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's broad repo-setup behavior is coherent with its stated purpose, and I found no clear credential harvesting or exfiltration. Risk comes from mutable supply-chain steps and especially transitive installation of additional skill content via an unpinned GitHub/Nix fetch; this is medium risk rather than confirmed malware.

Confidence: 90%Severity: 64%

Audit Metadata

Analyzed At

Sep 27, 2026, 05:10 AM

Package URL

pkg:socket/skills-sh/darkmatter%2Fskills%2Fdarkmatter-repo-setup%2F@8737dd5361572c166ea5023d721d008dd7aefd910bc77addf46d5471f9e0caad