status

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose matches its local status-reading behavior, and there are no external installs or network flows, but it uses load-time shell execution and unsafely interpolates a file-derived path into cat commands. Risk is moderate due to pre-execution local file disclosure, not confirmed malware.

Confidence: 90%Severity: 54%
Audit Metadata
Analyzed At
Aug 26, 2026, 09:34 PM
Package URL
pkg:socket/skills-sh/lilmgenius%2Fpolysona%2Fstatus%2F@e35b7152a19a2fbb2396239ca8a627bbf8eacabb35403823089c8f2d9f1a8fac
Security Audit — socket — status