skills/rheinmir/setup/new-project-setup/Socket

new-project-setup

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The core wiki setup actions are coherent, and the RTK binary appears to be an official same-org release, but the skill also performs transitive skill installation and relies on an unverifiable `sync-template` trust chain. Main risk is supply-chain and broad agent/config modification, not confirmed malware.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

Jul 15, 2026, 02:19 AM

Package URL

pkg:socket/skills-sh/Rheinmir%2Fsetup%2Fnew-project-setup%2F@d87cfcf4b3c8c95e140af17940f4b814549c7a7d