research

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a research skill, and there is no credential harvesting, proxy API routing, or malicious install path in the skill content. The main concern is architectural: it combines broad web ingestion with Agent/Write/Bash/Skill capabilities, which creates elevated indirect prompt-injection and transitive-skill risk disproportionate to a pure research workflow.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Aug 7, 2026, 07:20 AM
Package URL
pkg:socket/skills-sh/niekcandaele%2Fskills%2Fresearch%2F@93dab2dcdaf0822a5c2f0fa1c68f8b547a16d792b49c4ab43559b2df90d76044
Security Audit — socket — research