install-bensz-skills

Warn

Audited by Socket on May 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as a system-wide installer, but it carries medium risk because it installs other skills globally and supports unattended remote installation from mutable GitHub branches. The main concern is transitive trust expansion, not confirmed malware or credential theft.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
May 11, 2026, 02:08 PM
Package URL
pkg:socket/skills-sh/huangwb8%2Fskills%2Finstall-bensz-skills%2F@242f80fd2c2575702507bb079c6311a6d809da52