skills/jarmen423/skills/checklist-ledger/Socket

checklist-ledger

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s task-management purpose is coherent, but it requires reading local credential storage and forwarding an admin token to an external `checklist` CLI whose provenance is not established in the skill. That combination triggers high supply-chain and credential-forwarding risk without clear evidence of confirmed malicious intent.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Jul 10, 2026, 08:42 PM

Package URL

pkg:socket/skills-sh/jarmen423%2Fskills%2Fchecklist-ledger%2F@5cc1255e36160c0749652f9be76cc4bd7dbf2d148fc6ffe2e10849bac9b60ee3