skills/fellowship-dev/dogfooded-skills/entropy-check/Socket

entropy-check

Warn

Audited by Socket on Apr 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core grading behavior is coherent, and GitHub data flows stay on official endpoints, but the skill is not actually read-only. Its transitive unpinned installation, automatic writes/commits/issues, and cross-repo drift checks make its footprint broader than the stated sensor role.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Apr 26, 2026, 02:55 AM

Package URL

pkg:socket/skills-sh/fellowship-dev%2Fdogfooded-skills%2Fentropy-check%2F@16a4fc8131e378897e487fabbcf32807676663b5