labs-quickstart

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, and consent is requested before public publishing or transcript submission, but its actual footprint relies heavily on remote download-and-execute from a specific convex.site deployment plus remote telemetry/runbook control. This is proportionate to a bootstrap/publish workflow, yet the install/execution trust is high-risk enough to classify the skill as suspicious rather than benign.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Aug 31, 2026, 02:53 AM
Package URL
pkg:socket/skills-sh/get-convex%2Fconvex-backend-skill%2Flabs-quickstart%2F@910dd002b688093dd6a78e9f49155cd64fc17d05908e8f1d020bf2130ccd0564
Security Audit — socket — labs-quickstart