skills/immersive-commons/ic-skills/immersivecommons/Socket

immersivecommons

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The umbrella skill is mostly coherent with its stated purpose and uses same-brand endpoints, but it instructs transitive installation of an external skill bundle and extends trust to many sibling skills not reviewed here. Main concern is the added trust chain and moderate supply-chain exposure, not confirmed malicious behavior.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Jul 21, 2026, 07:14 AM

Package URL

pkg:socket/skills-sh/immersive-commons%2Fic-skills%2Fimmersivecommons%2F@9322b7baf65cdef934d982add601675543b1ad39695d2b3fcfc401387deb97cc