skills/sickn33/agentic-awesome-skills/manifest/Socket

manifest

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The purpose and default Manifest endpoint are broadly consistent with an observability setup skill, but the trust chain is weak: a community skill installs an unverified plugin, then asks the user to paste an API key for that plugin. The main concern is transitive plugin trust and credential forwarding, not confirmed malicious exfiltration.

Confidence: 83%Severity: 76%

Audit Metadata

Analyzed At

Jul 31, 2026, 04:37 PM

Package URL

pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fmanifest%2F@2d1db04b3859955b65e4cc1ee97b48f71410b9c5aa8bb568a29436cbe5aefae3