skill-crafting

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's main behavior is consistent with a local eval runner, and there is no evidence of hidden network exfiltration or overt malware. However, it deliberately executes shell fixture commands and an unverifiable local adapter, and it can forward environment variables to that adapter; these capabilities are powerful and should only be used with trusted eval specs and trusted local adapters.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Oct 12, 2026, 05:12 AM
Package URL
pkg:socket/skills-sh/sentimony%2Fskills%2Fskill-crafting%2F@b335466472e593abec24d7fd93c03406395c5c91ef32d5b0dc10be1ada16b37d