eachlabs-product-visuals
Warn
Audited by Socket on Aug 5, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the provided artifact is only an install stub that pulls a mutable external CLI and then installs another skill through a registry, so trust depends on transitive components not shown here. No direct malware indicators or hostile data exfiltration are visible, but the incomplete skill body and unpinned install path make this medium risk rather than benign.
Confidence: 81%Severity: 58%
Audit Metadata