skills/nomadamas/k-skill/k-skill-setup/Socket

k-skill-setup

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose matches a setup/bootstrap skill, but the skill is mostly a thin loader for externally delivered instructions via an npm CLI. That is not confirmed malicious, yet it creates medium supply-chain and trust risk because the actual behavior is remote/mutable and not fully reviewable in the skill itself.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Sep 18, 2026, 04:29 AM

Package URL

pkg:socket/skills-sh/nomadamas%2Fk-skill%2Fk-skill-setup%2F@c9e08e3e4181249756c5406dce4497ea8c75b4dd03b482dbd30e3de84189343c