skills/naporin0624/claude-web-audit-plugins/sast-runner/Socket

sast-runner

Warn

Audited by Socket on Jun 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are coherent for SAST, and Semgrep itself is sourced from official channels. However, the `npx sast-runner` wrapper and archive-based community distribution are not strongly verified, adding moderate supply-chain risk despite no signs of credential theft or malicious data flows.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jun 29, 2026, 02:32 AM

Package URL

pkg:socket/skills-sh/naporin0624%2Fclaude-web-audit-plugins%2Fsast-runner%2F@779853400f93c2e1833a3b9774a0908756cb04e0dc96945aeccd921d5b2501f3