pst-run

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it relies on unverified downstream skills whose provenance, permissions, and data flows are not disclosed. No direct credential theft or exfiltration is shown, yet the transitive skill chain and opaque downstream execution make this higher risk than a standalone local orchestration skill.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 8, 2026, 06:48 PM
Package URL
pkg:socket/skills-sh/lautaroleonhardt%2Fpst%2Fpst-run%2F@433db29a61a3aa18d3036796b049b7c281684465
Security Audit — socket — pst-run