skills/halt-catch-fire/superpowers/agent-ui/Socket

agent-ui

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent, and the API key plus proxy route are proportionate for an Inference-hosted agent UI. The main concern is transitive installation of other skills/CLI and remote URL-based component retrieval, which expands trust beyond this skill and raises supply-chain risk without clear pinning or independent review.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Aug 12, 2026, 10:39 PM

Package URL

pkg:socket/skills-sh/halt-catch-fire%2Fsuperpowers%2Fagent-ui%2F@0dd9af55f120cdbc4c0e6f3bf85e0c685718193fb182b7681e3005717d780d95