skills/jord5s/everything-claude-code/configure-ecc/Socket

configure-ecc

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly aligned with its stated purpose as an ECC installer, but it relies on an unpinned GitHub clone from a personal account and performs transitive installation of many additional skills. No clear credential harvesting or exfiltration appears, yet the install trust model and inherited-permissions chain make it medium risk rather than benign.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Apr 14, 2026, 12:19 AM

Package URL

pkg:socket/skills-sh/Jord5s%2Feverything-claude-code%2Fconfigure-ecc%2F@c9b5a6e76e55fb01bf1ddc2e390d59db019b3e2b