skills/microsoft/agent365-skills/test-local/Socket

test-local

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the overall behavior mostly fits a local testing skill, but trust is weakened by the unresolved CLI package-name mismatch versus Microsoft documentation and by the fact that the skill claims read-only behavior while performing installs and executing project code. This looks more like a moderate supply-chain/execution-risk skill than confirmed malware.

Confidence: 84%Severity: 61%

Audit Metadata

Analyzed At

Jul 11, 2026, 05:21 PM

Package URL

pkg:socket/skills-sh/microsoft%2Fagent365-skills%2Ftest-local%2F@36b429d50be60378b5124c76e5975f7957e9de8b5317189179159c31c6fc005b