ecosystem-reasoning

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose as an ecosystem router mostly matches the orchestration behavior, but the skill expands trust by installing and invoking many other skills through an unseen local installer script. No direct malicious exfiltration is visible in this excerpt, yet the transitive installation and delegated execution make the overall skill higher risk than a normal reasoning helper.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Sep 25, 2026, 10:52 PM
Package URL
pkg:socket/skills-sh/fatih-developer%2Ffth-skills%2Fecosystem-reasoning%2F@25f7cc8d8a57aad99e074f6dda733f2aba1f79cd9a1466ffc5dacbcdb4993116