skills/expanso-io/skills.expanso.io/expanso-transform-formats/Socket

expanso-transform-formats

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is benign, but the install and execution story is internally inconsistent with official Expanso documentation, and the skill references unseen pipeline/scripts plus unspecified credentials. This is not confirmed malware, but it has medium supply-chain and transparency risk.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jun 18, 2026, 07:05 PM

Package URL

pkg:socket/skills-sh/expanso-io%2Fskills.expanso.io%2Fexpanso-transform-formats%2F@e977bd1579a9edc22c19d657953665470019fe7eefeb9240c1fdafc10a4bfccb