skills/mjkimr/weekly-report/weekly-report-onboard/Socket

weekly-report-onboard

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s behavior mostly fits weekly-report onboarding, but it depends on executing third-party code straight from a personal GitHub repository via uvx. The main risk is supply-chain/install trust, not clear malicious behavior or exfiltration.

Confidence: 83%Severity: 56%

Audit Metadata

Analyzed At

Jul 30, 2026, 11:31 PM

Package URL

pkg:socket/skills-sh/mjkimR%2Fweekly-report%2Fweekly-report-onboard%2F@25993e897ce549b4d0783e1869856d5ba23421a172eec4ce21abcd6187472989