skills/exboys/skilllite/find-skills/Socket

find-skills

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is coherent in purpose, and the `skills` CLI looks official, but its primary function is transitive installation of third-party skills. That creates a significant trust-chain risk because installed skills can extend the agent with unreviewed instructions and permissions.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Apr 13, 2026, 06:33 AM

Package URL

pkg:socket/skills-sh/EXboys%2Fskilllite%2Ffind-skills%2F@4e501b4fce561d26781a05fae93d20a71a251f4c