find-skills

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose matches its behavior, and it uses an official CLI path, but its main function is transitive installation of additional skills from potentially untrusted external sources. The biggest risk is expanding agent capabilities by importing third-party instructions with global, prompt-skipping install commands.

Confidence: 91%Severity: 62%
Audit Metadata
Analyzed At
Aug 14, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/hoangsoft90%2Fai_skills%2Ffind-skills%2F@9e1c8b3103f92fa8092568a44fe64858de7c5c9dc65ce4bea8f168080e889cfd