socket-inspect
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill contains a hardcoded public demo API token (sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api) for the Socket platform. While documented as a public token for a demo organization, hardcoding credentials in instructions is a security risk.
- [COMMAND_EXECUTION]: Shell commands are used to execute the Socket CLI tool via pnpm dlx and npm.
- [EXTERNAL_DOWNLOADS]: The skill dynamically downloads the latest version of the socket CLI from the npm registry at runtime.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external sources such as security APIs and package metadata.
- Ingestion points: External package data from Socket PURL API, socket.dev package pages, and GitHub activity data.
- Boundary markers: No delimiters or ignore instructions are present for the external data being processed.
- Capability inventory: Subprocess execution via pnpm and network access via curl and WebFetch are available to the skill.
- Sanitization: No evidence of content validation or sanitization of external data before interpolation into the agent's context.
Audit Metadata