skills/ewrogers/megadev-skills/megadev-dialogue/Socket

megadev-dialogue

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's capabilities fit its stated game-dialogue purpose and it shows no credential harvesting or exfiltration, but the build instructions rely on an insufficiently verified third-party Docker image (ewrogers/megadev:latest) that does not clearly match the upstream Megadev publisher. Main risk is supply-chain trust, not malware.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Oct 19, 2026, 05:29 PM

Package URL

pkg:socket/skills-sh/ewrogers%2Fmegadev-skills%2Fmegadev-dialogue%2F@03b587be2aed35caa5799e34475fff5588a0917cadc65a39726ef3b5f7bc1d88