skills/moshe-ship/hurmoz/sarih/Socket

sarih

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s stated capabilities are coherent for an offline Arabic moderation tool, and it does not ask for credentials or route data off-host. However, the unverified prerequisite `sarih` binary creates a meaningful supply-chain trust gap because no official install source or release provenance was confirmed from the evidence.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Jun 19, 2026, 05:05 PM

Package URL

pkg:socket/skills-sh/Moshe-ship%2Fhurmoz%2Fsarih%2F@66175ed3a48ccd7714af1cb6c7dcad227457261bb2125ec63cadabcd2be192e3