algal-evolve

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent with an evolution/evaluation skill, and there is no clear credential theft or exfiltration path in the text. The main risk is install/execution trust: the skill delegates all behavior to an unpinned external CLI fetched via bunx, with no verified same-org provenance or release-validation evidence for algal-skills.

Confidence: 83%Severity: 62%
Audit Metadata
Analyzed At
Sep 19, 2026, 06:06 AM
Package URL
pkg:socket/skills-sh/0thernet%2Falgal-skills%2Falgal-evolve%2F@f2a60682f2c311d78099f0871266448e0131b7e9cd2c996c40f1d935be69a700