conformetry-generate

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s behavior is mostly coherent with its stated purpose: it explains how to run local scaffold generators and warns about overwrite semantics. No credential access, exfiltration, stealth, or third-party API routing is present. However, the required `conformetry` CLI could not be verified as an official same-org tool from the evidence, and the repo/org references are inconsistent, so this is best classified as suspicious due to install-trust risk rather than malicious behavior.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Sep 28, 2026, 06:20 PM
Package URL
pkg:socket/skills-sh/organizzolini%2Fcodebase%2Fconformetry-generate%2F@166da4b8571677a46414f79044701d6bb1af5f2b5f1395a12694435110fa6be0
Security Audit — socket — conformetry-generate