ralph

Warn

Audited by Socket on Nov 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill’s core development workflow is consistent with its stated purpose, and the excerpt shows no credential harvesting or data exfiltration. Risk comes chiefly from persistent autonomous editing, reduced confirmation prompts in YOLO mode, and an unpinned transitive skill source; review the omitted scripts and use explicit approval and pinned sources.

Confidence: 94%Severity: 56%
Audit Metadata
Analyzed At
Nov 6, 2026, 09:12 AM
Package URL
pkg:socket/skills-sh/jeo-tech-ai%2Foh-my-unity3d%2Fralph%2F@c3eaa9215e3a9e28f7339eba17b7796fed11aa52343025ddad269b0ab17e316b