batch-cad-converter

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the visible Python logic is consistent with batch file conversion and shows no direct exfiltration, but the skill's core capability relies on opaque external converter executables from outside standard registries. That makes the main risk supply-chain trust and black-box execution, not confirmed malware.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Jul 11, 2026, 05:35 PM
Package URL
pkg:socket/skills-sh/majiayu000%2Fclaude-skill-registry%2Fbatch-cad-converter%2F@9e103ee11203e01a4044e8676d293c1656e102b664b09f879095cb62b6be8b9a
Security Audit — socket — batch-cad-converter