skills/de-novo/skills/clearing/Socket

clearing

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent and narrowly read-only, but the skill depends on an unverifiable local `de-novo skills` CLI with no public provenance or install trust evidence. There is no direct credential harvesting or exfiltration in the skill text, yet the black-box executable makes the overall security risk high.

Confidence: 80%Severity: 74%

Audit Metadata

Analyzed At

Sep 9, 2026, 08:15 AM

Package URL

pkg:socket/skills-sh/de-novo%2Fskills%2Fclearing%2F@a80b49033ac3fcd8e4b5d9ad87ca0f548f7b8d405abfb56df259d19cfbe0348b