skills/gmh5225/awesome-llvm-security/llvm-optimization/Socket

llvm-optimization

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core LLVM guidance is coherent and mostly documentation-only, but the skill extends trust to a personal GitHub repo for live fetched content and transitive skill installation. No credential harvesting, exfiltration, or malware behavior is evident; the main concerns are mutable third-party content and supply-chain trust.

Confidence: 89%Severity: 53%

Audit Metadata

Analyzed At

Sep 21, 2026, 03:58 AM

Package URL

pkg:socket/skills-sh/gmh5225%2Fawesome-llvm-security%2Fllvm-optimization%2F@258287ad1be92766e766b044c0b66d17c866d746d1068a07658a777632f4e966