skills/gemini-cli-extensions/conductor/conductor-setup/Socket

conductor-setup

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core scaffolding behavior is coherent, but the skill expands into transitive skill installation via raw remote downloads and includes a small concealment directive. The main risk is supply-chain trust, not confirmed malware.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Oct 17, 2026, 04:48 AM

Package URL

pkg:socket/skills-sh/gemini-cli-extensions%2Fconductor%2Fconductor-setup%2F@0093e9703f1faa7e5a490dff5d4f86fa90e674e9410c9b91aa9166d3485f9463