skills/fountain-fm/fountain-skills/fountain-onboarding/Socket

fountain-onboarding

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, but it expands scope by requiring plugin/skill installation from GitHub and by setting up additional automation/software beyond basic API onboarding. No direct credential theft or exfiltration is shown, yet the transitive trust chain and local-install behavior make this a medium-risk onboarding skill rather than a benign documentation-only guide.

Confidence: 79%Severity: 56%

Audit Metadata

Analyzed At

Sep 22, 2026, 03:05 PM

Package URL

pkg:socket/skills-sh/fountain-fm%2Ffountain-skills%2Ffountain-onboarding%2F@1717b3f8389af7a202ca5f7bd4f6f6fc168154396e783e0670792e1ab20ca218