onboardingV2

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core behavior matches LaunchDarkly onboarding, and its credential/data flows are mostly proportionate and aimed at official LaunchDarkly services. The main risk is install trust: it uses an external Skills CLI plus runtime installation of multiple nested remote skills, including one repo path not clearly verified by the provided evidence, creating a medium-to-high transitive supply-chain risk rather than clear malware.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Aug 3, 2026, 10:54 PM
Package URL
pkg:socket/skills-sh/launchdarkly%2Fexperimental-agent-skills%2Fonboardingv2%2F@e13de75a3c22851830288745b2aa77302a70f736
Security Audit — socket — onboardingV2