find-skills-sh

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches discovery/installation of skills, and the CLI source appears official, but the skill's main effect is transitive installation of additional unreviewed skills from potentially arbitrary repositories. This is a coherent but high-trust workflow with meaningful supply-chain risk, especially given global non-interactive install guidance and default project installation.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Jul 16, 2026, 04:27 PM
Package URL
pkg:socket/skills-sh/kortix-ai%2Fsuna%2Ffind-skills-sh%2F@ca7313e6de5d382f3c2005214cd98e2502c2424a016d610709b95c8d6199230e
Security Audit — socket — find-skills-sh