onboardingV2
Warn
Audited by Socket on Aug 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s core behavior matches LaunchDarkly onboarding, and its credential/data flows are mostly proportionate and aimed at official LaunchDarkly services. The main risk is install trust: it uses an external Skills CLI plus runtime installation of multiple nested remote skills, including one repo path not clearly verified by the provided evidence, creating a medium-to-high transitive supply-chain risk rather than clear malware.
Confidence: 85%Severity: 68%
Audit Metadata