skills/grahama1970/agent-skills/cui-marker/Socket

cui-marker

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated CUI compliance purpose is plausible and no explicit exfiltration or credential harvesting appears, but the skill’s real behavior hinges on an unseen `./run.sh` plus four composed skills. That opacity, combined with shell execution and undocumented ArangoDB interaction details, makes the footprint insufficiently verifiable for a benign classification.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Mar 17, 2026, 06:39 AM

Package URL

pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fcui-marker%2F@67931c555a6c3f70aa92eb387a5bf46686b393e1