soc2-compliance-checker

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is a vague SOC2 compliance helper, but the actual permission footprint includes unrestricted shell execution and file modification without concrete scope limits, approved toolchain, or defined data flows. No confirmed malware or exfiltration is present, yet the capability set is broader than necessary for the claimed purpose.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Aug 28, 2026, 06:01 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fsoc2-compliance-checker%2F@db89f9817194a96dc4c07d815ed3f1be7368ede78c41aecd088f43006cb0b575