collaborate

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated collaboration purpose is coherent with graph/channel messaging, but the actual trust boundary rests on unverifiable external `iskron_*` tooling, an unspecified MCP bootstrap, webhook egress, and transitive skill dependencies. No direct malware behavior or malicious installer is shown in the text, but the undocumented external toolchain makes the skill high-risk to trust.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Sep 8, 2026, 11:18 AM
Package URL
pkg:socket/skills-sh/iskron-ai%2Fskills%2Fcollaborate%2F@a5382512cbd9e9ab4ca810abf833f20b4236d72c32360af0ea5428d5092aa0a3