skills/loxosceles-dev/dev-skills/project-setup/Socket

project-setup

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core project-scaffolding purpose is plausible, but the skill’s footprint extends into agent-skill and MCP ecosystem setup. The main concern is transitive installation of a third-party skill via an official CLI, which expands trust and permissions beyond the stated scaffolding task.

Confidence: 89%Severity: 74%

Audit Metadata

Analyzed At

Aug 26, 2026, 03:28 PM

Package URL

pkg:socket/skills-sh/loxosceles-dev%2Fdev-skills%2Fproject-setup%2F@3caa7f2dcff727eebe100686a642b9388a48e90b82655ff5f3b77d9ed5106596