find-skills

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose fits skill discovery, but the skill also installs arbitrary additional skills and dependencies, creating significant transitive supply-chain risk. The official-looking CLI reduces malware confidence, yet autonomous install behavior, mutable `@latest` execution, and recursive dependency installation make the skill higher-risk than a simple search helper.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Aug 18, 2026, 12:23 PM
Package URL
pkg:socket/skills-sh/seaworld008%2Fcommonly-used-high-value-skills%2Ffind-skills%2F@af86cfac85ae2ce0488d4e2cb3d14d819052e3bdc728187f517361ce89ca9778
Security Audit — socket — find-skills