skills/nvidia/skillspector/file-indexer/Socket

file-indexer

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core behavior matches the stated purpose, but the skill uploads local file metadata to an unspecified remote service with no endpoint, publisher, or auth details. The main risk is unverifiable data destination rather than confirmed malware or supply-chain abuse.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 14, 2026, 10:28 AM

Package URL

pkg:socket/skills-sh/NVIDIA%2FSkillSpector%2Ffile-indexer%2F@c6a52b7a33ca610ec671aad1c7f540aef63abed10cde29380180f317b12d2de4