skills/papischolz/roadmapsmith/roadmap-audit/Socket

roadmap-audit

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s behavior is mostly aligned with its stated purpose, but trust is weakened by unverifiable provenance for the RoadmapSmith CLI—especially the fallback PATH binary. No credential harvesting, remote installer, or explicit exfiltration is shown, so this is a provenance/supply-chain concern rather than confirmed malware.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jun 18, 2026, 10:50 PM

Package URL

pkg:socket/skills-sh/PapiScholz%2Froadmapsmith%2Froadmap-audit%2F@972748af17fc7180b1f1a2a1f27a068c16244d10eddddf0138f58919aabafb2c