security-policy-generator

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS due to poor scope proportionality: a generic security-policy skill is given unrestricted shell access and is ambiguously tied to broader pentesting/security tasks without concrete boundaries. There is no evidence of malware, exfiltration, or malicious install behavior in the provided text, but the capability footprint is broader than necessary for the stated purpose.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:54 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fsecurity-policy-generator%2F@0b4df3f72ab07ebce6207426883aabe0e321121ad94b207c402c5e9d2eef7b9b