skills/rohitg00/buildwithclaude/aurakit/Socket

aurakit

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated developer-assistant purpose is plausible, but the trust footprint is larger than necessary and under-explained. Same-publisher npm/GitHub consistency reduces concern, yet install-time execution from a personal package/repo plus opaque runtime hooks and session-learning behavior make this a high supply-chain and moderate privacy risk rather than clearly benign.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Jul 18, 2026, 04:25 PM

Package URL

pkg:socket/skills-sh/rohitg00%2Fbuildwithclaude%2Faurakit%2F@339fa5a7aca6d5e7d15d1d8260de1c120c60814efafa766081a14a62f9d033a0