skillshare

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to install and propagate other skills from arbitrary third-party sources. Same-org installer provenance is acceptable, yet the transitive trust chain, arbitrary hub URLs, and audit-bypass flags make this a medium-high security risk even without clear malware indicators.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Jun 18, 2026, 02:47 AM
Package URL
pkg:socket/skills-sh/JetBrains%2Fskills%2Fskillshare%2F@91d62ed3f5b304bae138ffa965c89cb2f0a3c53f
Security Audit — socket — skillshare