ui-skills-root

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches a skill router, but it is primarily a transitive skill loader that pulls external instruction content through a CLI. No clear credential theft or direct exfiltration is shown, yet the external trust chain and remote instruction-loading make this medium risk.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 06:01 PM
Package URL
pkg:socket/skills-sh/ibelick%2Fui-skills%2Fui-skills-root%2F@bb567bac226f772db3feb7401b11e1bf9f03efb21de770e53ba3ac90cd41cb41
Security Audit — socket — ui-skills-root