skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/ifc-to-excel/Socket

ifc-to-excel

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill’s behavior matches its stated IFC-to-Excel purpose and shows no credential harvesting or exfiltration. However, it relies on a proprietary external CLI that is not verifiable through an official package registry or public source, so the skill is best classified as SUSPICIOUS due to supply-chain/install trust rather than malicious intent.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Sep 18, 2026, 01:08 AM

Package URL

pkg:socket/skills-sh/datadrivenconstruction%2Fddc_skills_for_ai_agents_in_construction%2Fifc-to-excel%2F@07f56ef4f1ec996d67d6bc627e9177380a7a44be0903273a61752b6df36fd72f