semantius-admin

Warn

Audited by Socket on Oct 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s Semantius administration purpose generally matches its API access, workspace operations, and live-model workflow. The primary concern is supply-chain and credential-forwarding risk: it installs a native CLI outside an official package registry and uses it with authentication, while other tool downloads are unpinned and unchecked. Remote artifacts also create prompt-injection exposure, though the skill does not direct the agent to obey their instructions. High security risk is warranted, but the supplied content does not confirm malicious intent.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Oct 31, 2026, 04:37 PM
Package URL
pkg:socket/skills-sh/semantius%2Fsemantius-cli%2Fsemantius-admin%2F@74dc03c8efd4cfa4eea14260abfdf9e0bd2a1634d2e81345ce0b70e1d52d6ada