skills/mksglu/claude-context-mode/ctx-upgrade/Socket

ctx-upgrade

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, and external evidence supports that the GitHub/npm upgrade flow belongs to the same project. However, it instructs the agent to run an opaque shell command from an MCP tool and to apply unpinned GitHub-sourced updates that modify global npm state and hooks, creating meaningful execution and supply-chain risk.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Mar 25, 2026, 10:04 AM

Package URL

pkg:socket/skills-sh/mksglu%2Fclaude-context-mode%2Fctx-upgrade%2F@f1f6f9890320c870785987a8b989e2a63d268bcc