all-skills

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the content itself is mostly benign guidance, but it installs and relies on a third-party personal skill repository through a transitive trust chain. The official CLI provenance reduces install-trust concerns, yet the global scope and inherited permissions from an external repo make this higher risk than a normal documentation-only skill.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Apr 16, 2026, 01:15 PM
Package URL
pkg:socket/skills-sh/klh%2Fskills%2Fall-skills%2F@c1880cea15a62545ea7faef1b4575b07f999c72f
Security Audit — socket — all-skills