impact-analysis-helper

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is vague and low-specificity, while its granted capability includes unrestricted bash execution that is broader than necessary for a simple impact-analysis helper. There is no direct evidence of credential theft, exfiltration, malicious installers, or hidden payloads, so this is not confirmed malware; the main issue is disproportionate scope and unclear trust provenance.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:44 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fimpact-analysis-helper%2F@1da0eb608e260e8fe246ad97ab63b6e404f9be78eef199c03fbbfcf3480264a6