soia-safe-audit-fix-codebase

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的目的与多数能力基本一致,但其风险主要来自三点:要求以通配权限安装技能、继续安装其他技能形成传递信任链,以及在处理不受信任代码时同时具备执行与写入能力。整体更像高风险的双用途安全审计技能,而非明显恶意技能。

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 22, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/soia-team%2Fsoia-open-safe-skills%2Fsoia-safe-audit-fix-codebase%2F@307ebfccaf03e95fdc31b12853df8dce7a49050293d0ebb8e54080097e73fe83
Security Audit — socket — soia-safe-audit-fix-codebase