skills/ibossynr1/aaas-vault/agent-registry/Socket

agent-registry

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core local registry/migration behavior fits the stated purpose, but the skill introduces a transitive skill-install path and a broader prompt-loading trust chain. Main concerns are install provenance ambiguity and loading arbitrary agent instructions, not credential theft or direct exfiltration.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

Apr 10, 2026, 01:37 PM

Package URL

pkg:socket/skills-sh/ibossyNr1%2Faaas-vault%2Fagent-registry%2F@b36c9d42d3d0c5a03cd88555faea02d1f79088f6