sdd-archive

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior mostly matches an SDD archive skill, but it sends project data to an external Engram memory system whose provenance and install trust are not established in the skill, and it also relies on another local skill inline. Not confirmed malware, but the external memory data flow and transitive local-skill trust raise medium security concern.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Aug 14, 2026, 10:15 AM
Package URL
pkg:socket/skills-sh/fearovex-labs%2Fagent-config%2Fsdd-archive%2F@d52b311520a00a8239409cfe4801e477ca2941d62b27a5623171bf6a0c9c3bb7
Security Audit — socket — sdd-archive