skills/legalquants/lq-skills/redlines/Socket

redlines

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the dependency story is not. The skill claims a JavaScript package/API that does not match the verified same-org official distribution, which appears to be a Python package/CLI; this inconsistency creates moderate supply-chain and dependency-confusion risk even though there is no evidence of active credential theft or malicious data routing.

Confidence: 91%Severity: 62%

Audit Metadata

Analyzed At

Jul 8, 2026, 08:54 AM

Package URL

pkg:socket/skills-sh/LegalQuants%2Flq-skills%2Fredlines%2F@5281a8cd2f46121218e1c5df5d0c109166d556ba5a1806f3bde03ef908293210