self-learning

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with its stated research-and-skill-generation purpose and uses no external installers or credentials, but it has a meaningful indirect prompt-injection risk because it ingests untrusted web content and turns it into persistent skill files without strong sanitization or instruction-isolation rules.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:36 PM
Package URL
pkg:socket/skills-sh/philschmid%2Fself-learning-skill%2Fself-learning%2F@382e2f07712e7fbd4e3f7967bb73224fd8934923ef0d7b88dd462673d79e89c4
Security Audit — socket — self-learning