skills/liangmiqwq/skills/creating-projects/Socket

creating-projects

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's local project-scaffolding purpose is broadened by mandatory transitive skill loading and reliance on a remote-control CLI with unresolved public provenance and credential handling. This is not confirmed malware, but the external trust and data-flow footprint is disproportionate to a generic 'create projects' skill.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Jul 24, 2026, 12:27 PM

Package URL

pkg:socket/skills-sh/liangmiQwQ%2Fskills%2Fcreating-projects%2F@cf4226f67fa74f1b352f940f4780d5e3fb2cd7c8267ef0bef78209d62a36cd2a