skills/microlinkhq/skills/run-skill/Socket

run-skill

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose matches the capability, but the skill materially expands trust by fetching and executing arbitrary remote skills from GitHub/skills.sh. The main risk is transitive remote-instruction execution and prompt-injection style control transfer, not confirmed malware.

Confidence: 86%Severity: 72%

Audit Metadata

Analyzed At

Jul 11, 2026, 01:32 PM

Package URL

pkg:socket/skills-sh/microlinkhq%2Fskills%2Frun-skill%2F@0bd41c51bfe120fe4f8df1d97ab4a1e721a1d3578a4f7122365d9608a197bec5