batch-cad-converter

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the visible Python logic is consistent with batch file conversion and shows no direct exfiltration, but the skill's core capability relies on opaque external converter executables from outside standard registries. That makes the main risk supply-chain trust and black-box execution, not confirmed malware.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Jul 11, 2026, 05:35 PM
Package URL
pkg:socket/skills-sh/majiayu000%2Fclaude-skill-registry%2Fbatch-cad-converter%2F@9e103ee11203e01a4044e8676d293c1656e102b664b09f879095cb62b6be8b9a