skills/maojiebc/majia-siyu-team/majia-siyu/Socket

majia-siyu

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

Anomalymodules/siyu-update/SKILL.md

LOW

AnomalyLOW

modules/siyu-update/SKILL.md

SUSPICIOUS. The skill is internally coherent as an updater for one specific project and does not ask for disproportionate access, but it instructs the agent to install another skill from a personal GitHub repository. Because transitive skill installation inherits agent permissions and integrity validation for installed skills appears limited, this is medium risk rather than benign.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Sep 14, 2026, 03:58 AM

Package URL

pkg:socket/skills-sh/maojiebc%2Fmajia-siyu-team%2Fmajia-siyu%2F@444f5e34bc94900c7db79b5bdd444c242c15885a822413544fe8abe18cf9681d