roadmap-generator

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill does not show overt malware or exfiltration, but its stated purpose is vague and its permissions are disproportionate. Unrestricted Bash plus read/write access is broader than needed for a generic roadmap-guidance skill, and the artifact lacks strong release/install trust evidence.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 21, 2026, 11:33 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins%2Froadmap-generator%2F@6c8efc57f4bfcd38aefec1ad1ea5d5e8e726cd1ea94b0f14ea5f948f562f3e2f
Security Audit — socket — roadmap-generator