skills/iannuttall/skills/find-skills/Socket

find-skills

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose matches its behavior, but that behavior is inherently high-trust because it discovers and installs other skills. The main risks are transitive skill installation and partially verified CLI provenance via on-demand `npx` execution, not overt malware or exfiltration.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Sep 22, 2026, 05:48 AM

Package URL

pkg:socket/skills-sh/iannuttall%2Fskills%2Ffind-skills%2F@8640bcded3fb5b5c7e9321c0ccaaafaa3b60bb74e532154665fa43c1efecfc4e