skills/scottermonk/agentautoflow/app-knowledge/Socket

app-knowledge

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core app-knowledge purpose is mostly legitimate, but including .env as a routine source is over-scoped and the use of transitive skills introduces trust and possible data-flow risks. No confirmed malware or direct exfiltration is shown in this skill alone, but credential exposure and delegated browsing make it medium risk.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Mar 27, 2026, 03:34 PM

Package URL

pkg:socket/skills-sh/ScotterMonk%2FAgentAutoFlow%2Fapp-knowledge%2F@74a0c3e09d1bfb915fac3dfe272514d961ba3d74