iii-core-primitives

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's main content aligns with iii orchestration, but it materially expands trust by instructing installation of registry/OCI workers that are executable services. No direct credential theft or covert exfiltration is shown, yet the transitive worker-install model and binary/service distribution raise meaningful supply-chain risk.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Jun 25, 2026, 11:50 AM
Package URL
pkg:socket/skills-sh/iii-hq%2Fiii%2Fiii-core-primitives%2F@84a80b59c5c3bd65cb982446e7b6b9793e7b455a420979e3e8d80fe7b5ad3582
Security Audit — socket — iii-core-primitives