dspy-best-of-n

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The BestOfN guidance itself is mostly benign documentation, but the skill embeds transitive installation instructions that direct the agent to load other skills from a personal third-party repo. That behavior is not necessary for explaining DSPy BestOfN and introduces avoidable supply-chain and inherited-permissions risk. No direct credential theft or exfiltration is present in this skill alone.

Confidence: 91%Severity: 62%
Audit Metadata
Analyzed At
May 13, 2026, 06:47 PM
Package URL
pkg:socket/skills-sh/lebsral%2Fdspy-programming-not-prompting-lms-skills%2Fdspy-best-of-n%2F@d75e8c1eba343039bf3eca8bcd8c7227b698cb46