amplifier-digital-twin-universe

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s capabilities mostly fit its stated purpose of standing up realistic isolated test environments, but the install path relies on an unpinned GitHub repository whose exact public provenance could not be verified from the evidence provided. The execution and file-transfer powers are proportionate for a digital-twin tool, yet they are broad and combined with unclear model-provider data flows increase overall risk.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Sep 5, 2026, 04:28 AM
Package URL
pkg:socket/skills-sh/microsoft%2Famplifier-smart-tool-digital-twin-universe%2Famplifier-digital-twin-universe%2F@7d7c8a30e90759e9f0a35fa9c7af8449f42cac7d3d3c9bd2320b8e946ba9531e
Security Audit — socket — amplifier-digital-twin-universe