skills/fatih-developer/fth-skills/ecosystem-security/Socket

ecosystem-security

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated routing purpose is coherent, but it explicitly enables transitive installation and execution of unseen member skills through an unreviewed local installer. No direct exfiltration or credential theft is shown, yet install provenance and downstream trust are not verifiable from the provided artifact.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Sep 25, 2026, 10:52 PM

Package URL

pkg:socket/skills-sh/fatih-developer%2Ffth-skills%2Fecosystem-security%2F@b9b9d9cb46f87189a23473a1dc2600e86eec615574dcb10ee10d49424b6266ca