palisade-security-nexus-bitdefender

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose is plausible, but its actual install path is not: it downloads and executes unverifiable binaries from a personal GitHub Pages domain unrelated to Bitdefender or the publisher. Product/CLI claims do not align with known Bitdefender documentation, and the skill additionally forwards sensitive scan data to third-party AI APIs and uses broad remote administration features. This footprint is internally inconsistent and high risk for supply-chain compromise.

Confidence: 96%Severity: 97%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fpalisade-security-nexus-bitdefender%2F@36fbdee78f5c59b47ff3f23556ef986a52af1bd5186954a31da9555906d170b3