skills/magentosh/skills/agent-ui/Socket

agent-ui

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent, and the API key plus proxy route are proportionate for an Inference-hosted agent UI. The main concern is transitive installation of other skills/CLI and remote URL-based component retrieval, which expands trust beyond this skill and raises supply-chain risk without clear pinning or independent review.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:06 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fagent-ui%2F@0dd9af55f120cdbc4c0e6f3bf85e0c685718193fb182b7681e3005717d780d95