skills/rebyteai/rebyte-skills/skill-manager/Socket

skill-manager

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's core behavior fits its stated purpose, but it relies on an undocumented internal relay, a non-public auth helper binary, and unverified server-provided download URLs. This is not strongly indicative of malware, yet the install/auth/data-flow trust story is only partially verifiable, so medium risk is warranted.

Confidence: 86%Severity: 57%

Audit Metadata

Analyzed At

Apr 16, 2026, 05:43 PM

Package URL

pkg:socket/skills-sh/rebyteai%2Frebyte-skills%2Fskill-manager%2F@a61efc953825a5e577927cd80238989c0c3b4105