skills/davepoon/buildwithclaude/ontoly-software-graph/Socket

ontoly-software-graph

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a code-analysis skill, but trust in the actual Ontoly tooling is not verifiable from the supplied evidence. The main issue is supply-chain uncertainty around an external CLI/MCP dependency, not confirmed malware or explicit exfiltration.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Jul 14, 2026, 10:39 PM

Package URL

pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fontoly-software-graph%2F@9b71b54276eba3c8479223453f4ce45269994fbe897357aef1108fb765ea642a