skills/papischolz/roadmapsmith/zero/Socket

zero

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill expands scope by instructing the agent to install a separate skill and grant it wildcard permissions. The external CLI dependency is not inherently malicious, yet the transitive install plus `--skill '*'` makes the trust model broader than necessary for roadmap generation.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 14, 2026, 02:25 AM

Package URL

pkg:socket/skills-sh/PapiScholz%2Froadmapsmith%2Fzero%2F@e75fd18808ebec57831f6a916b4a80f3eed618489465587cb7d29b8468e5d954