wordpress-woocommerce-development

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated WooCommerce development purpose is plausible, but it is internally inconsistent because it repeatedly routes normal development work through unrelated third-party skills, including a penetration-testing skill. No direct malware or exfiltration appears in this file, but the transitive trust chain and mismatched offensive-skill dependency make it medium-to-high risk.

Confidence: 88%Severity: 71%
Audit Metadata
Analyzed At
Jul 24, 2026, 02:31 PM
Package URL
pkg:socket/skills-sh/ncdevshiv%2FNC-skills-mcp%2Fwordpress-woocommerce-development%2F@2a90bf305f4fc58c26861c05eafb9f7decedd9fdeac796a8ca8fbffd99b41d0c
Security Audit — socket — wordpress-woocommerce-development