expanso-aggregate-time-windows

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill is too thin to verify install provenance, credential scope, or data destinations. Main concerns are the transitive `clawhub` install path, binary-name mismatch, and hidden behavior in referenced local files rather than anything overtly malicious in the visible markdown.

Confidence: 81%Severity: 56%
Audit Metadata
Analyzed At
Jul 26, 2026, 05:45 AM
Package URL
pkg:socket/skills-sh/expanso-io%2Fskills.expanso.io%2Fexpanso-aggregate-time-windows%2F@4300bb769f0666aede9ff3a4939e42e4f255b13347f858143cc5df0c63f800f4
Security Audit — socket — expanso-aggregate-time-windows