skills/lirrensi/agent-cli-helpers/skill-store/Socket

skill-store

Warn

Audited by Socket on May 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a local skill browser, but the actual trust boundary is too broad. The skill depends on an unverified external CLI and points users toward transitive installation of third-party skills, which is disproportionate unless installer provenance and skill-source trust are clearly established.

Confidence: 83%Severity: 78%

Audit Metadata

Analyzed At

May 16, 2026, 02:35 AM

Package URL

pkg:socket/skills-sh/lirrensi%2Fagent-cli-helpers%2Fskill-store%2F@384627b2954aea6b85f6081dac7962d1325319e4