skills/oxsecurity/megalinter/megalinter-setup/Socket

megalinter-setup

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The main MegaLinter install/upgrade flow is coherent and uses official documented paths, but the skill expands into transitive installation/update of other skills and sub-agents, plus optional credential forwarding to external tooling. This is not confirmed malware, yet its footprint is broader than a simple linter setup skill and carries meaningful supply-chain and trust-extension risk.

Confidence: 88%Severity: 64%

Audit Metadata

Analyzed At

Aug 28, 2026, 04:28 PM

Package URL

pkg:socket/skills-sh/oxsecurity%2Fmegalinter%2Fmegalinter-setup%2F@d87ef706c7ecc9b8540385e3b7cfefca122e893dc7083ed268b29f756c374718