skills/magentosh/skills/customer-persona/Socket

customer-persona

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, but its footprint relies on external CLI installation, brokered third-party data flows, and transitive skill installation. This looks more like a legitimate but higher-trust workflow than malware, with medium risk from supply-chain and trust-chain expansion rather than overt exfiltration.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:06 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fcustomer-persona%2F@d05327f8ddcc21d06a3dae4dec3bd5b37a3a58142673fc3775289c2b4dfa40d5