skills/magentosh/skills/prompt-engineering/Socket

prompt-engineering

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the prompt-engineering purpose is mostly coherent, but the skill unnecessarily relies on external skill installation and a not-fully-verified `belt-sh/cli` publisher path, plus it encourages further transitive skill installs. Data flows match a prompting tool, but install-trust and credential-forwarding risks are higher than expected for a guide skill.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:05 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fprompt-engineering%2F@3028f0482f38efb1e8de6541dea478e8ff82d4f265d9ccf9cbd350dac2cce2a9