skills/expanso-io/skills.expanso.io/expanso-remove-pii/Socket

expanso-remove-pii

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The purpose is plausible, but the install path and binary naming are inconsistent with official Expanso documentation, and the skill references unspecified credentials plus unseen scripts/pipeline that could route sensitive data elsewhere. No confirmed malicious behavior is visible in the provided text, but the trust and data-flow gaps make the skill medium risk.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 17, 2026, 12:40 PM

Package URL

pkg:socket/skills-sh/expanso-io%2Fskills.expanso.io%2Fexpanso-remove-pii%2F@ade55c05c9f3f307b14444f1d34a495dd0b15a6416d296b11b1b12a0d5a8f233