ecosystem-api

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is mainly a dispatcher that installs other skills through an unseen local script and unspecified downstream sources. The main concern is transitive trust and unverifiable install behavior, not confirmed malware or direct credential theft in the provided file.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Apr 16, 2026, 06:36 AM
Package URL
pkg:socket/skills-sh/fatih-developer%2Ffth-skills%2Fecosystem-api%2F@0fc814989854320793e8998ec53a1291de9604ff