skills/reason-machines/security-skills/ai-security-trainer-2026/Socket

ai-security-trainer-2026

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s stated purpose and capabilities are mostly coherent for a local training platform, and its data flows are local and proportionate. The main concern is install trust: the skill is presented as an ara.so security skill but tells users to clone and run a repo from an unrelated personal GitHub account, which is a significant provenance inconsistency even without direct evidence of malware.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Aug 4, 2026, 10:33 PM

Package URL

pkg:socket/skills-sh/Aradotso%2Fsecurity-skills%2Fai-security-trainer-2026%2F@81861b524ffdd9904b5b6b432bfdf96065f0a762631c0c0a1109ced7083ce68b