skills/halt-catch-fire/skills/competitor-teardown/Socket

competitor-teardown

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the research capabilities fit the stated purpose, but the skill expands trust by requiring transitive skill installation, mutable remote install docs, and broad belt-enabled Bash access while processing untrusted web content. This is more a supply-chain and prompt-injection exposure than confirmed malware.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Aug 3, 2026, 03:53 PM

Package URL

pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Fcompetitor-teardown%2F@ef60db86bf031f83735a3fa5ca3bac8918f0241c351e06a549ff59871b3d5ecc