skills/open-horizon-labs/repo-native-alignment/setup/Socket

setup

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's actions broadly fit its stated setup purpose, but it combines automatic execution, unpinned download-and-extract of a GitHub release binary, and project file modifications without confirmation. This looks more like a risky installer/setup workflow than credential theft or clear malware.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

May 13, 2026, 01:45 PM

Package URL

pkg:socket/skills-sh/open-horizon-labs%2Frepo-native-alignment%2Fsetup%2F@2481b238a3ab75e89b57fe5740702f1be584e903