find-skills

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its purpose, and the CLI provenance appears official and documented. The main risk is transitive trust: this skill exists to install additional skills, including third-party ones, which inherit the agent’s trust boundary; that makes it high-risk but not malicious.

Confidence: 92%Severity: 74%
Audit Metadata
Analyzed At
Sep 4, 2026, 02:33 PM
Package URL
pkg:socket/skills-sh/ivantsxx%2Fbetter-auth-mp%2Ffind-skills%2F@c1720ff6ac18832a05d91cd913eee8781310e9f376ce77b8d5fc25a32e530a89
Security Audit — socket — find-skills