expanso-priority-queues

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but its execution details are internally inconsistent with the reviewed official Expanso tooling (`expanso` vs `expanso-edge`/`expanso-cli`, and mismatched run syntax). Install trust is moderate rather than malicious because the domains appear same-org, but the unpinned curl|shell pattern and opaque credential scope increase risk. No direct evidence of credential theft or malicious exfiltration is present in the supplied skill text alone.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
Jul 26, 2026, 05:45 AM
Package URL
pkg:socket/skills-sh/expanso-io%2Fskills.expanso.io%2Fexpanso-priority-queues%2F@12c0ddeaa3ab47ee5da1460725c60d90da7afd5377b8e5e24a0dc72fda35617c
Security Audit — socket — expanso-priority-queues