skills/iftechio/easykol-skills/easykol/Socket

easykol

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s core capabilities mostly match its influencer-research purpose, but it combines silent autonomous execution, automatic unpinned upgrades, transitive skill updating, and credential forwarding to an external CLI. This looks more like a high-risk vendor-integrated workflow than confirmed malware.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Aug 31, 2026, 02:12 PM

Package URL

pkg:socket/skills-sh/iftechio%2Feasykol-skills%2Feasykol%2F@84bebef9cd02afd0cf4889b1f5c796149be7d82d29fc187c84997635b80b7e01