skills/kshanxs/skill-dojo/research-dojo/Socket

research-dojo

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core research workflow is coherent and mostly benign, but the embedded recommendation to install additional GitHub-hosted skills creates a transitive trust/supply-chain risk that is not necessary for the main research function. No credential harvesting, covert behavior, or direct exfiltration is evident.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Jul 18, 2026, 01:18 AM

Package URL

pkg:socket/skills-sh/kshanxs%2Fskill-dojo%2Fresearch-dojo%2F@ba1f4a299f9c03af93e31667593578cdc464ba9eed166d17ed40a2e7f9a19b3a