find-skills

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose matches its behavior, and it uses an official CLI path, but its main function is transitive installation of additional skills from potentially untrusted external sources. The biggest risk is expanding agent capabilities by importing third-party instructions with global, prompt-skipping install commands.

Confidence: 91%Severity: 62%
Audit Metadata
Analyzed At
Sep 18, 2026, 02:34 PM
Package URL
pkg:socket/skills-sh/jsonlee12138%2Fagent-team%2Ffind-skills%2F@9e1c8b3103f92fa8092568a44fe64858de7c5c9dc65ce4bea8f168080e889cfd