performing-security-audits

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill’s stated purpose broadly matches its capabilities, but it is a high-risk security/audit skill because it grants unrestricted shell access and references opaque plugin subtools without clear execution or data-flow boundaries. I see no confirmed malicious behavior, but the combination of AI-driven security auditing, broad permissions, and unspecified backend/tool behavior makes it suspicious rather than benign.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Jul 21, 2026, 11:34 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins%2Fperforming-security-audits%2F@0109672c4c24e4542e375c8104669d7d33da1d7b1aaedb3d0d3339e52aa45399
Security Audit — socket — performing-security-audits