skills/jschulte/claude-plugins/implement/Socket

implement

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core purpose is coherent for a spec-driven development skill, and most behavior is standard repo-local automation. Risk rises because the skill mixes official GitHub Spec Kit workflow with additional `/stackshift.*` commands of unclear provenance and is reportedly installed from a mutable GitHub `HEAD`, creating avoidable supply-chain and execution-trust concerns.

Confidence: 81%Severity: 57%

Audit Metadata

Analyzed At

Mar 29, 2026, 05:29 PM

Package URL

pkg:socket/skills-sh/jschulte%2Fclaude-plugins%2Fimplement%2F@db4dc2981c35d659c7aa5c83473285d1f7e65d7d