skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/oce-bim-takeoff/Socket

oce-bim-takeoff

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

BENIGN in purpose and data flow, but HIGH supply-chain risk due to reliance on bundled/optional proprietary converter binaries that are not fully verifiable from the skill materials. No clear credential harvesting, exfiltration endpoint, or malicious mismatch is shown.

Confidence: 83%Severity: 78%

Audit Metadata

Analyzed At

Aug 24, 2026, 01:21 AM

Package URL

pkg:socket/skills-sh/datadrivenconstruction%2Fddc_skills_for_ai_agents_in_construction%2Foce-bim-takeoff%2F@355fc2c242f1d712fc014271b06e71e5c31a291c59d2d8c386071f8fb1f54209