skills/forwardimpact/fit-skills/fit-pathway/Socket

fit-pathway

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated purpose is coherent with local data loading, file generation, and site serving, and there is no sign of credential harvesting or malicious data routing. The main risk is install trust: the skill depends on npx-executed packages whose official provenance could not be verified from primary sources, plus an unverified companion CLI.

Confidence: 79%Severity: 52%

Audit Metadata

Analyzed At

May 13, 2026, 04:34 AM

Package URL

pkg:socket/skills-sh/forwardimpact%2Fskills%2Ffit-pathway%2F@bbfbdd58ae303b2d1261a6da47e6dca00fcfbde2