skills/pedroromeroluna/ai-first-product-skills/insight-engine/Socket

insight-engine

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core research-synthesis behavior is coherent and proportionate, with no credential collection or exfiltration. The main risks are transitive skill installation instructions and unpinned GitHub-based skill loading through the `skills` CLI, plus exposure to indirect prompt injection from untrusted research text while retaining file-write ability.

Confidence: 88%Severity: 53%

Audit Metadata

Analyzed At

Aug 29, 2026, 05:23 AM

Package URL

pkg:socket/skills-sh/pedroromeroluna%2Fai-first-product-skills%2Finsight-engine%2F@457efce1a5e83c0356ec4423a2a465926ad2db799a6a94c6d39848cf1d0fe480