customize

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s broad local modification scope fits its customization purpose, and it lacks direct exfiltration or hidden behavior. The main concern is transitive trust: it delegates to many /add-* skills and references adapter fetching from branch-based sources, so final safety depends heavily on downstream skills and install provenance.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Aug 18, 2026, 03:11 AM
Package URL
pkg:socket/skills-sh/nanocoai%2Fnanoclaw%2Fcustomize%2F@48b4b221652d37818bec04bc9b6efa80a54d9cdc2aa84f1e5315abb9140736f3
Security Audit — socket — customize