skills/demerzels-lab/elsamultiskillagent/sovereign-rpg-xp-engine/Socket

sovereign-rpg-xp-engine

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly a wrapper that tells the agent/user to install another skill via an unpinned `npx` CLI. The CLI appears official to the same ecosystem, which lowers malware confidence, but the transitive skill installation and unverified target skill provenance make the footprint riskier than the claimed simple RPG purpose.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 16, 2026, 01:07 AM

Package URL

pkg:socket/skills-sh/Demerzels-lab%2Felsamultiskillagent%2Fsovereign-rpg-xp-engine%2F@c02fbc6113fd0168374085df0dd4fda48873ca48bd1bd25f7eb2f5b7b3243593