inquest

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's research purpose is plausible, but its actual footprint is broad and under-scoped: it pushes the agent to query every reachable evidence source, ingest untrusted external content, and rely on separate tools (`deslop`, `muster`) outside the reviewed skill. There is no confirmed malware or direct credential theft in the text, but the combination of broad MCP reach, prompt-injection exposure, and transitive tool trust makes this a medium-risk agent skill.

Confidence: 81%Severity: 66%
Audit Metadata
Analyzed At
Aug 25, 2026, 03:12 PM
Package URL
pkg:socket/skills-sh/howells%2Fskills%2Finquest%2F@e15ee7fb4c50316057db7bfce6fe9078092fbab7541b61a9918a27e32b1ad1c4
Security Audit — socket — inquest