excel-to-bim

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned for Excel-to-BIM updates, and there is no evidence of credential theft or remote exfiltration. However, it delegates core functionality to an external same-org .exe that is not verifiably distributed via an official registry or accompanied here by checksums/signatures, making the install/execution trust disproportionate enough to warrant a medium-high risk classification.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Sep 14, 2026, 02:45 PM
Package URL
pkg:socket/skills-sh/datadrivenconstruction%2Fddc_skills_for_ai_agents_in_construction%2Fexcel-to-bim%2F@051b4816ec9887c4bf41962928150345cbb9063afee64f7114a76dd8f40248f9