skills/johnlindquist/claude/beads/Socket

beads

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s task-tracking behavior is coherent, but the installation instructions are materially inconsistent with the real Beads project. The main risk is supply-chain confusion: 'cargo install beads' may install an unrelated package instead of the official bd CLI. No evidence of credential theft, malicious data routing, or covert behavior appears in the skill text.

Confidence: 93%Severity: 62%

Audit Metadata

Analyzed At

Sep 16, 2026, 08:26 PM

Package URL

pkg:socket/skills-sh/johnlindquist%2Fclaude%2Fbeads%2F@2bad17f684ba019428d99079938e33c124b5214d4b0dfa6a7acd7ee7fdaf51bd