skills/fudesign2008/open-skills/merge-discipline/Socket

merge-discipline

Warn

Audited by Socket on Oct 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core capabilities fit the stated merge-discipline purpose, and the documented git/gh/glab/OpenSpec commands are proportionate. The main risk is transitive trust: the skill requires installing another skill from a third-party skill pack via the Skills CLI, and even suggests wildcard pack installation, which broadens trust beyond this skill. No clear credential harvesting, hidden exfiltration, or deceptive data routing is shown.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Oct 28, 2026, 05:12 AM

Package URL

pkg:socket/skills-sh/fudesign2008%2Fopen-skills%2Fmerge-discipline%2F@7df36f77caefa12331c8951f2ea8c6794e3b77e78d74a6b044aed65b6378c61e