skills/fatih-developer/fth-skills/ecosystem-mobile/Socket

ecosystem-mobile

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated mobile-orchestration purpose is plausible, but the skill's primary behavior is to install other unverified skills through an opaque local script. The main risk is supply-chain plus transitive skill installation, not confirmed malware or direct exfiltration.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

Apr 18, 2026, 08:58 PM

Package URL

pkg:socket/skills-sh/fatih-developer%2Ffth-skills%2Fecosystem-mobile%2F@80b77e4d42e7c27ea072cef440ac18e7cd7abb87