skills/lucasduarteinacio/ai-skills/pal/Socket

pal

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities fit its stated purpose, but it externalizes code analysis to MCP services and depends on trust-sensitive upstream install paths from GitHub-hosted sources. This looks more like a legitimate workflow wrapper with medium supply-chain and data-exposure risk than malware.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Oct 18, 2026, 07:00 PM

Package URL

pkg:socket/skills-sh/lucasduarteinacio%2Fai-skills%2Fpal%2F@84aaabef432fe58c174ac6f9321ed83bc1e91648eec12d8e74f5c5bd369fc3bc