normalize

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core UI-normalization behavior is coherent and non-exfiltrative, but the mandatory reliance on third-party skills introduces a transitive trust-chain risk that is unnecessary for the stated purpose. The stale/deprecated dependency reference increases concern, though there is no evidence of direct malware or credential theft in the provided skill itself.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Jul 10, 2026, 12:25 PM
Package URL
pkg:socket/skills-sh/MichaelTarasov02%2FSkills%2Fnormalize%2F@31fea408554e73c407cc17addad4f5f3dfba5a6ab8b75d14c1ca7b77c48507bd
Security Audit — socket — normalize