skills/manojbajaj95/agent-knowledge-cards/knowcards/Socket

knowcards

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a repo-memory helper, but the skill forces execution of an unverifiable, unpinned external npm CLI before normal work. No credential harvesting or overt exfiltration is shown, yet install/execution trust is disproportionally weak for a mandatory workflow dependency.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Aug 20, 2026, 06:27 AM

Package URL

pkg:socket/skills-sh/manojbajaj95%2Fagent-knowledge-cards%2Fknowcards%2F@9d5c6753699193d3db753a22ae9d65dee6692c862d412397fe77a2facaa733df