lsp-setup

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose broadly matches LSP setup, and it mainly touches project files and developer tooling consistent with that role. However, it is internally inconsistent: it says there are no dependencies and that it never auto-installs, yet its execution steps install plugins through unpinned npx cclsp and rely on a third-party CLI not verified as official Anthropic tooling. That makes the capability footprint and install trust disproportionate to a 'pure skill' description.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Oct 25, 2026, 02:03 PM
Package URL
pkg:socket/skills-sh/rysweet%2Famplihack%2Flsp-setup%2F@2e5bf4a34f3ae2b12f4871b01354b5b989a4bb9840aa5e46611b651fc8b38310