Skills
skills/get-convex/agent-skills/convex-improve-convex-plugin/Socket

convex-improve-convex-plugin

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the purpose is plausible, but the skill relies on an unpinned curl|bash helper from an unspecified host and sends local transcripts to an unverifiable endpoint. The main issue is install/execution trust and opaque data handling, not confirmed malware.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Aug 1, 2026, 05:26 PM
Package URL
pkg:socket/skills-sh/get-convex%2Fagent-skills%2Fconvex-improve-convex-plugin%2F@d2eb6763b639564ac8fbfee6bf69c49f06341e1f9c177c3fd9aa16dc0ec60b4e
Security Audit — socket — convex-improve-convex-plugin