clean-code

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is a clean-code style guide, but it expands into mandatory execution of many cross-skill local Python scripts whose provenance and behavior are not established by this skill. There is no confirmed malware or explicit credential theft, yet the transitive script-execution footprint is broader than necessary and creates high supply-chain risk.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Oct 22, 2026, 10:28 AM
Package URL
pkg:socket/skills-sh/quantumsolver%2Fe-health-kit%2Fclean-code%2F@aab0fbea7914decdc763358e199060933213db46b3239a1785c24e3dd8b5143b