Command Development

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is educational, but the skill embeds live pre-execution directives that can run local commands and plugin scripts immediately on load. There is no clear credential theft or remote-code fetch, so this is not confirmed malware, but the executable footprint is inconsistent with a safe documentation skill and creates high execution risk.

Confidence: 92%Severity: 91%
Audit Metadata
Analyzed At
Oct 7, 2026, 05:27 AM
Package URL
pkg:socket/skills-sh/orientpine%2Fhoneypot%2Fcommand-development%2F@87b8b0c7d56e812ccb9f9343bf96377b60bea8b9