skills/davidondrej/skills/bb-plugins/Socket

bb-plugins

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s behavior matches its stated purpose, and the official bb/get-bb relationships appear legitimate. The main risk is proportional but substantial: it teaches installation of full-trust third-party plugins from npm and arbitrary git repos without strong integrity verification, so the skill is coherent but high-impact if used with untrusted plugins.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Aug 20, 2026, 02:54 PM

Package URL

pkg:socket/skills-sh/davidondrej%2Fskills%2Fbb-plugins%2F@0b9f854381446f19e2dd217509b8edd326bf2b0858891b5b020adbe69e3eb025