sparkfinderoven-claude-security-compliance-suite

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the functional scope is broadly consistent with a security/compliance skill, but the install trust is not. The main concern is publisher/source inconsistency and use of an unverified personal GitHub repo for a high-privilege skill that can access sensitive project, cloud, and notification credentials.

Confidence: 87%Severity: 79%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fsparkfinderoven-claude-security-compliance-suite%2F@d900604e5ff6d60174142c5d9b3ceec90cf631d373493f9aaa1580826581d40f