vim-neovim

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. Most content is benign Neovim documentation and official ecosystem setup, but the companion check is disproportionate: it scans local agent skill directories and promotes transitive installation of unrelated third-party skills. No clear credential theft or malicious exfiltration is present, yet the trust expansion beyond Neovim support raises meaningful security risk.

Confidence: 88%Severity: 63%
Audit Metadata
Analyzed At
Apr 7, 2026, 03:07 PM
Package URL
pkg:socket/skills-sh/Samuelca6399%2FAbsolutelySkilled%2Fvim-neovim%2F@441c4d802ba7c8bb6a712181666feb55044bfc48
Security Audit — socket — vim-neovim