meta-recursive-discovery

Warn

Audited by Socket on Jun 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it is inherently high-trust because it teaches the agent to autonomously load and create additional skills. The main risk is transitive trust and indirect prompt injection from discovered skill content, not direct malware or credential theft in this file.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Jun 29, 2026, 08:38 PM
Package URL
pkg:socket/skills-sh/jcorpac%2Fai-skills-library%2Fmeta-recursive-discovery%2F@bd1287c6868a25414c5c5db7f1abb4270241dfe8d88765417e49153a37783a61