submit-to-hackathon

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core submission-writing behavior is benign and aligned with the stated purpose, but the skill includes configurable remote telemetry that posts to a non-pinned endpoint from ~/.superstack/config.json. This is not confirmed malware and does not clearly harvest credentials, yet the off-skill network data flow and preexisting-config-based telemetry make it higher risk than a purely local writing skill.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Apr 14, 2026, 03:27 PM
Package URL
pkg:socket/skills-sh/sendaifun%2Fsolana-new%2Fsubmit-to-hackathon%2F@6a627a8af4a70c7ca129412d21804c632048ccb5