skills/itsar-vr/goatedskills/pull-skills/Socket

pull-skills

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose is coherent, but it performs broad transitive skill synchronization from a mutable GitHub repo into several agent-consumed directories and depends on unseen local scripts. No direct credential theft is evident, yet the trust and scope impact are higher than a normal local maintenance skill.

Confidence: 87%Severity: 74%

Audit Metadata

Analyzed At

Apr 7, 2026, 01:01 PM

Package URL

pkg:socket/skills-sh/itsAR-VR%2Fgoatedskills%2Fpull-skills%2F@2f23cf2ebd88e8b710579370e584720fbc0d6546