skills/kidow/skills/step-by-step/Socket

step-by-step

Warn

Audited by Socket on May 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core interviewing behavior is benign, but the skill unnecessarily expands trust by prompting installation of an unverified third-party skill through an unpinned `npx` workflow. Risk is driven by transitive skill installation and moderate supply-chain exposure, not confirmed malware or credential theft.

Confidence: 86%Severity: 72%

Audit Metadata

Analyzed At

May 18, 2026, 02:13 AM

Package URL

pkg:socket/skills-sh/kidow%2Fskills%2Fstep-by-step%2F@f6d32d4bb62d746c55d489b6cc85cb9f6e7d809f