skills/kostja94/marketing-skills/trust-badges-generator/Socket

trust-badges-generator

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The entry is mostly a redirector that instructs the agent to install another skill from a personal GitHub repository, creating transitive trust and remote content risk. The installer path appears legitimate for the ecosystem, so this is not confirmed malware, but the skill's footprint is disproportionate for a deprecated compatibility stub and merits caution.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

Sep 25, 2026, 10:33 AM

Package URL

pkg:socket/skills-sh/kostja94%2Fmarketing-skills%2Ftrust-badges-generator%2F@80404d6d8fdb4090b33395533ead2e330b56e5f3798e4a0ae7ae04e863df3ea7