skills/itsssssjack/seven-skills/skill-smith/Socket

skill-smith

Warn

Audited by Socket on Aug 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the footprint is high-risk: it autonomously creates and installs new skills, relies on an unverifiable local audit script, and enables persistent capability expansion without guaranteed per-install user approval.

Confidence: 88%Severity: 78%

Audit Metadata

Analyzed At

Aug 9, 2026, 04:01 PM

Package URL

pkg:socket/skills-sh/itsssssjack%2Fseven-skills%2Fskill-smith%2F@4a655ea9a8cb4c44b7610c99f22bd1d474c126a234e798212cb687944d98c1b9