skills/lora-sys/skills/github-gem-seeker/Socket

github-gem-seeker

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The purpose is coherent, but the skill's footprint is too open-ended: it authorizes installing and running arbitrary GitHub-discovered tools, including direct downloads, with no provenance controls, pinning, or publisher verification. This is a high supply-chain risk skill rather than confirmed malware.

Confidence: 87%Severity: 76%

Audit Metadata

Analyzed At

Sep 10, 2026, 01:00 AM

Package URL

pkg:socket/skills-sh/lora-sys%2Fskills%2Fgithub-gem-seeker%2F@aa4ebe5f2b18829eae191f186a7715812f91bb02dc14f28d8e9302234f97026a