puda-labs

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated routing purpose matches the profile lookup behavior, but the skill’s main operational effect is to delegate trust to other lab skills and recommend installing them through an unverified `puda`/`pudap` channel. No credential theft or malicious payload is evident in this fragment, but the opaque transitive install path and downstream instruction loading make it a medium-risk skill.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Apr 20, 2026, 06:06 AM
Package URL
pkg:socket/skills-sh/PUDAP%2Fskills%2Fpuda-labs%2F@151eab4f688ebaa72b7060b773b3453af99a283b