skills/nicepkg/ai-workflow/add-new-skills-to-workflow/Socket

add-new-skills-to-workflow

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's actions fit its stated purpose, but that purpose is itself high-trust workflow modification through transitive installation of third-party skills from arbitrary GitHub URLs. The main issue is supply-chain and transitive trust, not confirmed malicious behavior.

Confidence: 87%Severity: 67%

Audit Metadata

Analyzed At

Sep 18, 2026, 02:07 PM

Package URL

pkg:socket/skills-sh/nicepkg%2Fai-workflow%2Fadd-new-skills-to-workflow%2F@e7a23d73028adae077c282428ca122288625b0aa3d2c3e1d94d8a5e5def317e2