feature-planning

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The wrapper's stated purpose matches its local file reads and planning workflow, but its core value depends on delegating project context to an unverified third-party sub-skill. No direct malware or credential-harvesting behavior is present in this skill, yet the transitive trust and indirect supply-chain risk make it higher risk than a purely local documentation/workflow skill.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Sep 25, 2026, 08:06 AM
Package URL
pkg:socket/skills-sh/nicepkg%2Fai-workflow%2Ffeature-planning%2F@ea9ce45bd8ec4dc1bd198035a162f10fbd608c85124f9bd5c1ac652d574ebbda