vim-neovim

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. Most content is benign Neovim documentation and official ecosystem setup, but the companion check is disproportionate: it scans local agent skill directories and promotes transitive installation of unrelated third-party skills. No clear credential theft or malicious exfiltration is present, yet the trust expansion beyond Neovim support raises meaningful security risk.

Confidence: 88%Severity: 63%
Audit Metadata
Analyzed At
Mar 23, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fvim-neovim%2F@441c4d802ba7c8bb6a712181666feb55044bfc48
Security Audit — socket — vim-neovim