skills/peter-tu-zynkr/zynkr-skill-builder/consult-discovery/Socket

consult-discovery

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS due to transitive skill installation from an unpinned third-party GitHub repository. The consulting purpose itself is coherent and no credential theft or malicious data routing is evident, but asking an agent to install external skill content introduces meaningful supply-chain and inherited-permission risk.

Confidence: 90%Severity: 62%

Audit Metadata

Analyzed At

Sep 10, 2026, 07:32 PM

Package URL

pkg:socket/skills-sh/peter-tu-zynkr%2Fzynkr-skill-builder%2Fconsult-discovery%2F@5516cd1470e3bb805613784ff623ea733a7cccc325e39e82b548b2068f0de7e0