semantius-analyst

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities mostly match its stated Semantius reconciliation purpose, and its no-delete guardrails are proportionate. The main concern is install/execution trust: it relies on a `semantius` CLI whose official provenance is not clearly verifiable from the provided material, plus external toolchain installs and authenticated live-catalog access through that CLI. This is not confirmed malware, but it carries medium risk until the Semantius CLI source, ownership, and official install path are verified.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Jun 28, 2026, 03:26 PM
Package URL
pkg:socket/skills-sh/semantius%2Fsemantius-cli%2Fsemantius-analyst%2F@c7cf59a36640518a1230fa882af0a242b14347723e0b50bffef565fd0a89f57d
Security Audit — socket — semantius-analyst