skills/inf-sh/skills/javascript-sdk/Socket

javascript-sdk

Warn

Audited by Socket on May 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core SDK documentation is largely coherent and uses standard npm distribution, but the skill is broadened by explicit transitive skill-install instructions and agent/tool patterns that expand trust beyond a simple JavaScript SDK. The main concern is scope creep and external skill installation, not confirmed malware.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

May 12, 2026, 10:58 PM

Package URL

pkg:socket/skills-sh/inf-sh%2Fskills%2Fjavascript-sdk%2F@dbab80f4e99cda59d55f7a294d2bf0db610d965c