skills/fruffel/reflex-cli-skill/reflex-scripting/Socket

reflex-scripting

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible, but its actual footprint relies on unverified `reflex` subcommands and an unverified companion skill. There is no clear malicious endpoint or credential harvesting, yet install/provenance ambiguity plus arbitrary scripting and network capability make the skill medium risk.

Confidence: 80%Severity: 61%

Audit Metadata

Analyzed At

Apr 10, 2026, 12:12 PM

Package URL

pkg:socket/skills-sh/Fruffel%2Freflex-cli-skill%2Freflex-scripting%2F@9b81a5724a230fa2ef1668fecab9bba9e120d3b6