list

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly a redirect that asks the agent to install another skill from a personal GitHub repo. The install path is ecosystem-consistent and not overtly malicious, but the transitive trust, unpinned target, and limited provenance make it higher risk than a self-contained deprecated notice.

Confidence: 87%Severity: 63%
Audit Metadata
Analyzed At
Sep 25, 2026, 10:33 AM
Package URL
pkg:socket/skills-sh/kostja94%2Fmarketing-skills%2Flist%2F@501a5b93352d8b97d4f7ce99c2b9f51249ddaa6b85d64b746d929bd22c2015b3