skills/konglong87/superpm/plan-launch/Socket

plan-launch

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it depends on installing and trusting multiple unreviewed skills from a personal GitHub repository. This is mainly a transitive-trust and supply-chain concern, not confirmed malware or credential theft.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Sep 25, 2026, 01:17 PM

Package URL

pkg:socket/skills-sh/konglong87%2Fsuperpm%2Fplan-launch%2F@f77a388652dca0f368a4f7b56af71084132184c89e282079e4cbd34db64a251d