linuxmirrors-docker

Warn

Audited by Socket on Jul 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

总体为可解释的 Docker 安装/换源规划技能,目的、所需文件访问和配置修改基本一致,未见凭据收集或异常数据外传。主要风险来自将执行信任交给第三方 LinuxMirrors 远程脚本:虽然项目关系可验证、用途相符,但安装方式是未固定版本的远程脚本执行,缺少校验/签名,属中等供应链风险。因此应判定为 SUSPICIOUS 而非恶意。

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Jul 13, 2026, 08:14 AM
Package URL
pkg:socket/skills-sh/full-stack-skills%2Fdevops-skills%2Flinuxmirrors-docker%2F@57ed37fc4985d5c5e07cbf529f34650395f98cdf4f0c1b4059d8125976b29657
Security Audit — socket — linuxmirrors-docker