skills/lovstudio/skills/lov-xhs/Socket

lov-xhs

Fail

Audited by Socket on Sep 10, 2026

1 alert found:

Obfuscated File

Obfuscated FileSKILL.md

HIGH

Obfuscated FileHIGH

SKILL.md

SUSPICIOUS. The visible skill is mainly a loader for encrypted instructions, so the real behavior cannot be reviewed from this artifact. Same-org package-manager distribution lowers supply-chain concern, but hidden instructions, mandatory remote decryption, and transitive skill installation make the skill's effective footprint opaque and higher risk than a normal research helper.

Confidence: 90%

Audit Metadata

Analyzed At

Sep 10, 2026, 02:02 AM

Package URL

pkg:socket/skills-sh/lovstudio%2Fskills%2Flov-xhs%2F@0ba23655002bf0e226f11c6b5cf5d3775a607cc781fb2fd3a7d069e194f8b5aa