skill-share

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s local creation/packaging behavior fits its purpose, but the Slack integration relies on a stale third-party Rube/Composio layer, with under-documented installer provenance and intermediary data flow for Slack messages/auth. No clear malware indicators appear, but trust and data-flow integrity are only partially justified.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Jun 28, 2026, 03:19 AM
Package URL
pkg:socket/skills-sh/muratcankoylan%2Fcomposioskills%2Fskill-share%2F@edc7981891c1b799215b3beab0e1226956f5a4324a9900cf853887aa0ea8fc61
Security Audit — socket — skill-share