skills/konglong87/superpm/analyze-growth/Socket

analyze-growth

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it depends on transitive installation and execution of multiple unreviewed skills from a personal GitHub repo. The main risk is inherited trust and supply-chain exposure, not confirmed malware.

Confidence: 91%Severity: 71%

Audit Metadata

Analyzed At

Sep 25, 2026, 01:17 PM

Package URL

pkg:socket/skills-sh/konglong87%2Fsuperpm%2Fanalyze-growth%2F@2ff1985ccbfe2bfca7b559febf473a3b3157788489cc0d8729dd40fc96fccfc1