skills/jamie-bitflight/claude_skills/evaluate-and-tighten-skills/Socket

evaluate-and-tighten-skills

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose is coherent and fail-closed behavior is appropriate, but it explicitly instructs transitive installation of another skill through an unverifiable GitHub README. The main risk is supply-chain and delegated trust, not confirmed malicious behavior or data exfiltration.

Confidence: 88%Severity: 64%

Audit Metadata

Analyzed At

Oct 3, 2026, 10:29 AM

Package URL

pkg:socket/skills-sh/jamie-bitflight%2Fclaude_skills%2Fevaluate-and-tighten-skills%2F@c02a8262587387bc377ee2e8ca1146b9a6031980277295f8362126ac8f8aabb0