security-review

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is largely coherent with its stated security-review purpose and uses mostly official/local tooling, so it is not confirmed malicious. However, it grants an AI agent broad security-audit and host-inspection capability, accesses highly sensitive files, and chains into other skills/subagents, making the overall operational risk high even without clear exfiltration or deceptive data routing.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:24 PM
Package URL
pkg:socket/skills-sh/duc01226%2Feasyplatform%2Fsecurity-review%2F@9ee70a14ab3d27248ec0e412348ac39b1e47c10ebfaa3702e2a35058711e7c9d
Security Audit — socket — security-review