skills/paleo/alignfirst/aligndev/Socket

aligndev

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches delegation through aligndev, but the skill is mostly a thin wrapper around unpinned external CLI execution and externally supplied instructions. Same-author npm/GitHub linkage makes this more consistent than a random third-party payload, yet the trust boundary is shifted to code and guidance outside the reviewed skill.

Confidence: 79%Severity: 58%

Audit Metadata

Analyzed At

Oct 12, 2026, 05:23 AM

Package URL

pkg:socket/skills-sh/paleo%2Falignfirst%2Faligndev%2F@b4dad3589509a1fbaa7f2d46047edd66f5fc04d5fb696220fa4b383e40bbb5a7