kie-byok-stuck

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core goal is coherent with KIE BYOK diagnostics, and credentials flow to official KIE endpoints rather than a proxy, so this is not confirmed malware. But it directly extracts secrets, uses root SSH on production, and can execute an unpinned `npx tsx` workflow, making it a high-privilege operational skill with meaningful security risk.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
May 18, 2026, 05:40 AM
Package URL
pkg:socket/skills-sh/imsuperseller%2Fsuperseller%2Fkie-byok-stuck%2F@e484623f729d8719eff1028bafe65feba9b5de9f