iii-core-primitives
Warn
Audited by Socket on Jun 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's main content aligns with iii orchestration, but it materially expands trust by instructing installation of registry/OCI workers that are executable services. No direct credential theft or covert exfiltration is shown, yet the transitive worker-install model and binary/service distribution raise meaningful supply-chain risk.
Confidence: 84%Severity: 69%
Audit Metadata