synthetic-users

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core research-writing behavior is coherent and low risk, but the skill also instructs transitive installation of additional skills from an unpinned third-party repo. That does not make this confirmed malware, yet it materially expands trust and permissions beyond the stated script-diagnosis task.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Oct 21, 2026, 02:52 PM
Package URL
pkg:socket/skills-sh/pedroromeroluna%2Fai-first-product-skills%2Fsynthetic-users%2F@1b4a5a4b0fa62590df623200cb26ce2256d51d690a5daa9486ccbb2b433957cc