skills/inference-sh/skills/agent-tools/Socket

agent-tools

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core inference.sh CLI usage is mostly coherent and same-org, so this is not confirmed malware. However, the skill combines remote installer execution, automatic local-file uploads, X/Twitter automation with real-world actions, and repeated transitive skill installation, making its footprint broader and riskier than a narrow CLI helper.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Sep 18, 2026, 02:59 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fagent-tools%2F@d7d58425310b2a14e500eb0ba7d80dbe4e601ce73fbb02d824be9bdff17a08ad