iblai-init

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the local CLAUDE.md update behavior is mostly aligned with the stated purpose, but the optional installation of an additional remote skill is a disproportionate transitive trust expansion. No direct malware or credential theft is evident, yet the skill increases agent capability through third-party instructions unrelated to the core file-editing task.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 14, 2026, 09:35 PM
Package URL
pkg:socket/skills-sh/iblai%2Fvibe%2Fiblai-init%2F@5c17d4b4d90ff4c2dd4024583ea0582dc37bd6c1