skills/iii-hq/workers/iii-directory/Socket

iii-directory

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and official registry data flow are mostly coherent, but it materially expands the agent's capabilities by installing additional worker bundles, and `download_from_repo` allows unpinned arbitrary GitHub sources. This is a real supply-chain/transitive-trust risk, not clear malware.

Confidence: 87%Severity: 68%

Audit Metadata

Analyzed At

Oct 5, 2026, 02:57 PM

Package URL

pkg:socket/skills-sh/iii-hq%2Fworkers%2Fiii-directory%2F@5fcac506ecec7dc08cfdc519871d4ee1930f0a5db485ae6e322872fed412d1c9