skill-scout

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches its capabilities, but it is a meta-installer/procurement skill that triggers transitive skill installation and depends on an external CLI with only partially verified provenance in the supplied evidence. Main risk is supply-chain and inherited trust from recommended plugins/skills, not clear malicious intent or direct credential theft.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 6, 2026, 09:40 PM
Package URL
pkg:socket/skills-sh/ericrisco%2Frsc-harness%2Fskill-scout%2F@f5294a873ce239ae9318a8e8a1dd48cfb8f80ac87b6e6b935223641790a89e1c
Security Audit — socket — skill-scout