skills/mattpocock/skills/to-spec/Socket

to-spec

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's core purpose is coherent, but it combines transitive skill installation with autonomous posting to an external issue tracker. Data flow appears proportionate and same-publisher install evidence reduces malware concern, yet the trust chain and lack of explicit approval before publication make it medium risk.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Jul 8, 2026, 01:21 PM

Package URL

pkg:socket/skills-sh/mattpocock%2Fskills%2Fto-spec%2F@305911f9a65016bf31b209ade13da492042e3ebe1434db4161a777a4efc69dbb