skills/leverage-computer/skills/agent-secrets/Socket

agent-secrets

Warn

Audited by Socket on Nov 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill has a plausible secret-management purpose, but relies on an unverified CLI and directs installation of another skill. The third-party gateway also handles requests with real secret headers, and its data flow is not independently verified. No confirmed credential theft or malicious payload is shown.

Confidence: 87%Severity: 74%

Audit Metadata

Analyzed At

Nov 9, 2026, 06:42 AM

Package URL

pkg:socket/skills-sh/leverage-computer%2Fskills%2Fagent-secrets%2F@e7f5b6ea65de1c42cd6428d1b99014c4f684b707f266178dbb753052a67a6a53