agentic-discovery

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent discovery skill with moderate risk: its capabilities fit the stated purpose, but it depends on a native CLI installed via remote installers, processes untrusted remote content, and encourages loading additional skills for enrollment/payment. This looks more suspicious than fully benign due to supply-chain and transitive-trust exposure, not because of confirmed malicious behavior.

Confidence: 80%Severity: 57%
Audit Metadata
Analyzed At
Aug 11, 2026, 07:38 PM
Package URL
pkg:socket/skills-sh/inflowpayai%2Finflow-cli%2Fagentic-discovery%2F@3d59b1efcb703f1c63ddec85fd222733b5cc994d7d9997ae2465fd8154d8bfeb
Security Audit — socket — agentic-discovery