assistant-lab

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose broadly matches training/evaluation/orchestration, but its footprint is high-impact. The main risks are autonomous model promotion, remote dataset transfer to RunPod, and transitive trust in many composed skills and third-party model providers whose exact credential/data flows are not defined here. No clear evidence of confirmed malware or a deceptive installer is present in this file alone.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Mar 17, 2026, 06:37 AM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fassistant-lab%2F@e2ccfca8968a8ca393090a0241608496213a1716
Security Audit — socket — assistant-lab