quest-iterate

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is not confirmed malicious, but it is security-significant because it outsources its core behavior to an external, insufficiently described CLI and linked setup process. The purpose is plausible, yet the install trust, action scope, and data flows are too opaque to treat as benign; overall this is best classified as suspicious/high-risk rather than malware.

Confidence: 75%Severity: 76%
Audit Metadata
Analyzed At
Oct 18, 2026, 08:06 PM
Package URL
pkg:socket/skills-sh/moq-dev%2Fmoq%2Fquest-iterate%2F@bd5bf1754dd04e55cfaafa2b394da8fad8ea7eab60ac36ce8e893a8b8a052fef