skills/google/mantis/mantis-history/Socket

mantis-history

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a security-history analysis skill, but it grants broad on-the-fly script execution and optionally sends repository diffs/messages to an unspecified LLM/API. The main risk is indirect prompt injection and underspecified data flow, not confirmed malware or overt credential theft.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jul 1, 2026, 07:03 PM

Package URL

pkg:socket/skills-sh/google%2Fmantis%2Fmantis-history%2F@6eaa43b2f8fbed20c3edacbacd51754b8c10100d