skills/ilyautov/consilium-principis/consilium-connect/Socket

consilium-connect

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is purpose-aligned as an onboarding wrapper for a local MCP server, and it does not request credentials or route data to third-party APIs. However, its whole function is to move the user into cloning and executing external GitHub-hosted code and then wiring that code into the agent, which creates moderate supply-chain and trust-boundary risk.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jul 24, 2026, 01:56 PM

Package URL

pkg:socket/skills-sh/ilyautov%2Fconsilium-principis%2Fconsilium-connect%2F@1392f49c5472e5822430de048f5ab496e1a874c1a8c31396b579e0f0e326b778