fit-guide

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as a product operations guide, but install trust is weak because the referenced Forward Impact CLIs/services are not verifiably tied to an official package/release source in the supplied evidence. Broad secret handling appears product-related rather than clearly malicious, yet the unverifiable tooling and unspecified proxy ownership keep overall risk elevated.

Confidence: 82%Severity: 78%
Audit Metadata
Analyzed At
Mar 28, 2026, 03:35 PM
Package URL
pkg:socket/skills-sh/forwardimpact%2Fskills%2Ffit-guide%2F@6af7dd447d7979aa087cd48ee96f2d605c358328
Security Audit — socket — fit-guide