skills/nomadamas/k-skill/donation-place-search/Socket

donation-place-search

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is benign, but the skill is mostly a loader stub that delegates agent behavior to remotely fetched instructions and an external CLI. This is more of an install/trust and reviewability problem than confirmed malware, but the remote delegation is disproportionate for a simple donation-search skill.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Sep 17, 2026, 07:38 AM

Package URL

pkg:socket/skills-sh/nomadamas%2Fk-skill%2Fdonation-place-search%2F@b97c305592b55295dd23d0044991aef4c094fcf10076a896122ddd9b429b07cc