using-axis

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core AXIS functionality is coherent and officially sourced from Netlify, so this is not malware and not fundamentally deceptive. The main concern is proportional transitive trust: the skill instructs installation of more skills through a separate third-party skills CLI that can fetch remote content and may use existing Git credentials, which expands the trust boundary beyond the stated report-reading/operator-guide purpose.

Confidence: 90%Severity: 54%
Audit Metadata
Analyzed At
Oct 13, 2026, 03:48 PM
Package URL
pkg:socket/skills-sh/netlify%2Faxis%2Fusing-axis%2F@5472d38b6b3bbfda9e89e96561e12775af4e857d2f4a689dbdafe2323bbcd631