skills/ewrogers/sgdk-skills/sgdk-localization/Socket

sgdk-localization

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated localization/build purpose is coherent, and it does not show obvious credential theft or exfiltration. However, it relies on an unverified third-party Docker image via a mutable latest tag, which triggers high supply-chain risk for an AI agent skill even without other malicious behavior.

Confidence: 83%Severity: 78%

Audit Metadata

Analyzed At

Oct 17, 2026, 02:33 AM

Package URL

pkg:socket/skills-sh/ewrogers%2Fsgdk-skills%2Fsgdk-localization%2F@0eb04c105f254ef7a1a391e92c9dac21e32dc35fef20730b0c420f80a6da0723