p-plugin-installer

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent as a Windows plugin-install repair guide, but it materially increases supply-chain risk by helping an agent manually install and enable arbitrary third-party plugin marketplaces and edit product state outside standard safeguards. No clear credential theft, exfiltration, or hidden execution is present.

Confidence: 84%Severity: 59%
Audit Metadata
Analyzed At
Jun 30, 2026, 08:14 AM
Package URL
pkg:socket/skills-sh/ShengLin1001%2Fcodex-config%2Fp-plugin-installer%2F@755822ee7deafec4114e66498eb380166e6aa3cdc3f6283a5ee472e0bde3a706