skills/jeremylongshore/claude-code-plugins-plus-skills/https-certificate-checker/Socket

https-certificate-checker

Warn

Audited by Socket on May 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill does not show malicious data flows or credential harvesting, but its generic boilerplate purpose does not justify the broad Bash(npm:*) execution scope. Main risk is open-ended npm-mediated code execution without pinned packages or task-specific constraints.

Confidence: 88%Severity: 52%

Audit Metadata

Analyzed At

May 4, 2026, 02:31 PM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fhttps-certificate-checker%2F@cadd5d4666b3daaf5d210c660f361b171df9619a