klh-dispatch

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s dispatcher purpose is coherent, but its main function is to install and invoke other skills from a personal repository, creating a medium-risk transitive trust chain. No direct credential harvesting, exfiltration, or hidden execution is present in this skill alone, but downstream behavior depends on unreviewed delegated skills.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Jun 19, 2026, 11:50 AM
Package URL
pkg:socket/skills-sh/klh%2Fskills%2Fklh-dispatch%2F@975ad5dd893f34e2128e25c3ec612c855e6b2e579e05d307c82782e1fb785313
Security Audit — socket — klh-dispatch