assign

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose matches the capability to delegate tasks, but the skill’s real execution path depends on an unseen REFERENCE.md and external agent CLIs. That makes install trust and data-flow verification incomplete, while the non-interactive delegation model gives an outside agent meaningful write/execution influence over the user’s workspace.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 04:26 PM
Package URL
pkg:socket/skills-sh/prathamdby%2Fskills%2Fassign%2F@9e12a389e05a27738f7e00388932cd12331453ed3e9b8510cdb5fdd8ddc17a8a
Security Audit — socket — assign