socket-sca
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation contains examples of malicious command patterns, such as piping curl outputs to bash, to illustrate what the tool should detect. These are diagnostic examples used in the documentation and are not executed by the skill itself.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@socketsecurity/clifrom the npm registry. This is a standard installation of a security tool from a well-known service provider. - [PROMPT_INJECTION]: The skill's primary function involves analyzing untrusted manifest files and source code, which constitutes an indirect prompt injection surface. This is a characteristic of the tool's intended use case and is not accompanied by any malicious logic.
- Ingestion points: Dependency manifest files (package.json, requirements.txt, etc.) and dependency source code (SKILL.md).
- Boundary markers: Absent for analyzed file content.
- Capability inventory: Execution of the socket CLI and filesystem enumeration (SKILL.md).
- Sanitization: None specified for package metadata or source content.
Audit Metadata