skills/reason-machines/security-skills/0xcarnemuerta-security-hub-portfolio/Socket

0xcarnemuerta-security-hub-portfolio

Warn

Audited by Socket on Aug 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the capability is coherent for a static portfolio/blog skill and it does not seek credentials or exfiltrate data, but the install source is a personal GitHub repo unrelated to the stated publisher, creating a meaningful provenance and supply-chain trust issue. Overall this looks more like weak trust hygiene than confirmed malicious behavior.

Confidence: 89%Severity: 52%

Audit Metadata

Analyzed At

Aug 23, 2026, 03:32 PM

Package URL

pkg:socket/skills-sh/aradotso%2Fsecurity-skills%2F0xcarnemuerta-security-hub-portfolio%2F@26c3cbef86194dbd17dc6d5ceb5a4b32b6a302f416d5c9465b587b4f081b3cb2