content-repurposing

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its content-repurposing purpose, and the `belt` installer appears to be official same-org infrastructure rather than a random payload. Risk comes from remote installer execution, credential handling through the inference.sh platform, optional public posting to X, broad Bash permission, and transitive skill installation. This is not confirmed malware, but it is higher-risk than a simple documentation skill.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
May 14, 2026, 02:27 AM
Package URL
pkg:socket/skills-sh/inference-sh-skills%2Fskills%2Fcontent-repurposing%2F@b7bf829c6de1bae82f7f165e4ff00b5d6288fa62
Security Audit — socket — content-repurposing