skills/lebsral/dspy-programming-not-prompting-lms-skills/ai-building-chatbots/Socket

ai-building-chatbots

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS due to transitive skill installation from an unpinned third-party GitHub repository, not due to the chatbot-building content itself. The core skill is a benign documentation guide with proportionate capabilities, but its recommendation to install additional skills extends trust to mutable remote content and raises supply-chain risk.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Oct 9, 2026, 08:46 PM

Package URL

pkg:socket/skills-sh/lebsral%2Fdspy-programming-not-prompting-lms-skills%2Fai-building-chatbots%2F@804ab6f677938fdadc25d83a260c05c240911ac02e72843a89fe53f8e92e0e90