meta-recursive-discovery

Warn

Audited by Socket on Jun 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it is inherently high-trust because it teaches the agent to autonomously load and create additional skills. The main risk is transitive trust and indirect prompt injection from discovered skill content, not direct malware or credential theft in this file.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Jun 29, 2026, 08:38 PM
Package URL
pkg:socket/skills-sh/jcorpac%2Fai-skills-library%2Fmeta-recursive-discovery%2F@bd1287c6868a25414c5c5db7f1abb4270241dfe8d88765417e49153a37783a61
Security Audit — socket — meta-recursive-discovery