ask

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is broadly consistent with research/Q&A, but the actual footprint is expansive for an 'ask' skill. Its transitive composition, broad local indexing, autonomous external ingestion, and untrusted-content processing with Bash/Write access create medium-high security risk even without direct evidence of credential theft or confirmed malicious exfiltration.

Confidence: 81%Severity: 68%
Audit Metadata
Analyzed At
Mar 17, 2026, 06:38 AM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fask%2F@605cdaaa9436838fad126c3a7dbcd7ce5b86a42a
Security Audit — socket — ask