skills/peter-tu-zynkr/zynkr-skill-builder/guest-lecturer-program/Socket

guest-lecturer-program

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the business workflow itself is coherent, but the skill's main security issue is transitive skill installation from a personal GitHub repo. There is no direct credential exfiltration or mismatched data flow in the provided text, yet the install step expands trust to unreviewed external skill content and is disproportionate enough to warrant caution.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Sep 10, 2026, 07:32 PM

Package URL

pkg:socket/skills-sh/peter-tu-zynkr%2Fzynkr-skill-builder%2Fguest-lecturer-program%2F@bacd4057bed4c0e9a3e9f3defdc24ec3b52cb65ddcf1bdead8319521595526ac