skills/solpbc/vit/using-vit/Socket

using-vit

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated purpose broadly matches social coding over ATProto, but its actual footprint is high risk because it depends on an unverifiable external CLI and includes network-driven transitive skill installation. The vet/trust gates reduce some risk, yet `vit learn` and remote-cap processing still make this disproportionate for a normal helper skill.

Confidence: 85%Severity: 86%

Audit Metadata

Analyzed At

Mar 28, 2026, 11:43 PM

Package URL

pkg:socket/skills-sh/solpbc%2Fvit%2Fusing-vit%2F@8ef70baafd2fc36a005a62ae9985680837265825