skills/magentosh/skills/competitor-teardown/Socket

competitor-teardown

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the research capabilities fit the stated purpose, but the skill expands trust by requiring transitive skill installation, mutable remote install docs, and broad belt-enabled Bash access while processing untrusted web content. This is more a supply-chain and prompt-injection exposure than confirmed malware.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:07 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fcompetitor-teardown%2F@2d99f283796874910c52f6f164bb4644762d902425e5210ba01dc625bfc498f7