skills/konglong87/superpm/define-strategy/Socket

define-strategy

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's stated purpose matches its orchestration behavior, and there is no sign of credential theft or hidden exfiltration. However, it is a transitive installer that asks the agent/user to trust additional unpinned skills from a personal GitHub repository, which materially expands the trust boundary beyond the reviewed skill.

Confidence: 91%Severity: 66%

Audit Metadata

Analyzed At

Sep 25, 2026, 01:17 PM

Package URL

pkg:socket/skills-sh/konglong87%2Fsuperpm%2Fdefine-strategy%2F@4ed83341e2cd16852afa8cb505e2bcc2e2b0b1ac94c984ae1dcbe07b2feda92a