decentraland-sdk-skills

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is mostly coherent with Decentraland scene development and includes good user-confirmation rules, but its primary behavior is to install/load additional skills, including wildcard loading, without providing verifiable provenance for those sub-skills or even its own promised one-command installer. That transitive trust risk outweighs the otherwise benign Decentraland-aligned content.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Jul 2, 2026, 07:08 PM
Package URL
pkg:socket/skills-sh/decentraland%2Fsdk-skills%2Fdecentraland-sdk-skills%2F@dcef0a480af71fd3e909d53a5ab8e2ae47d3ce0a
Security Audit — socket — decentraland-sdk-skills