soia-env-codex-setup-support

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core troubleshooting behavior is largely coherent and privacy-conscious, but the skill expands trust by instructing installation of additional skills/plugins and even uses wildcard permissions in one example. No clear credential theft or exfiltration is present, yet the transitive-install and broad-permission footprint is disproportionate enough to warrant caution.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Aug 6, 2026, 08:48 AM
Package URL
pkg:socket/skills-sh/soia-team%2Fsoia-open-env-skills%2Fsoia-env-codex-setup-support%2F@9b447754a80c57eac55611c05d913164fc84cec3e949375372b08486d98082b7
Security Audit — socket — soia-env-codex-setup-support