skill-seekers

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill is under-described relative to the linked project's broader behavior, and the author/source mismatch reduces trust. Main risk is not clear malware but converting untrusted external content into executable agent skills, which creates meaningful prompt-injection and supply-chain exposure.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Jun 19, 2026, 09:45 PM
Package URL
pkg:socket/skills-sh/ncdevshiv%2FNC-skills-mcp%2Fskill-seekers%2F@65b52cfbd0b354f74a1b4b8aa981cf6d5b3f82d9106865c1d7c7a4c9e3701eff
Security Audit — socket — skill-seekers