edge-find-skills

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches the capability, but the skill’s main function is to load third-party skills into the agent, creating a transitive trust chain. Install/data flows are mostly disclosed and same-brand, so this is not confirmed malicious; however, loading public external instructions on demand is a medium-high security risk even without local installation.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Oct 24, 2026, 08:22 PM
Package URL
pkg:socket/skills-sh/getedgehq%2Fskills%2Fedge-find-skills%2F@e79ab56ba616452543a565c17302c5b6064c067e27fcc5603a021fe390ee933a