skills/melvynx/cli-skills/clerk/Socket

clerk

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose is coherent, but its actual install instructions are internally inconsistent and do not match Clerk's official CLI distribution. This looks more like a misconfigured or outdated skill than confirmed malware, but the package mismatch creates medium supply-chain and execution-trust risk.

Confidence: 92%Severity: 56%

Audit Metadata

Analyzed At

Jun 23, 2026, 06:25 PM

Package URL

pkg:socket/skills-sh/Melvynx%2Fcli-skills%2Fclerk%2F@3a6025a10050a3826a7309fadbb8f2a579129204e893fe09d8ef82c71986701c