find-skills

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, and the CLI/install sources appear official to Vercel's skills ecosystem, so this is not malware. However, its core function is transitive skill installation, which materially expands trust to third-party instructions and scripts; that makes overall risk high even with same-org provenance for the installer.

Confidence: 92%Severity: 74%
Audit Metadata
Analyzed At
Oct 5, 2026, 05:41 AM
Package URL
pkg:socket/skills-sh/ptshih%2Fskills%2Ffind-skills%2F@46de3da81103726ff8a13d8c122dc305b50eedec15ce53b2660507f66d3f4a5d