skills/microsoft/agent365-skills/test-local/Socket

test-local

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The overall workflow matches a legitimate local-testing skill, but the documented install target for AgentsPlayground is inconsistent with Microsoft's official package naming. Because this skill asks the agent to globally install and execute that CLI, the provenance mismatch raises medium supply-chain risk despite otherwise coherent purpose and mostly local-only data flow.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Oct 19, 2026, 10:49 AM

Package URL

pkg:socket/skills-sh/microsoft%2Fagent365-skills%2Ftest-local%2F@22dccaa1823deae529eb70c6fb95001dbab1e7b3b343cb8743c76f0273bd62d3