trace

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The discovery purpose generally matches the search capabilities, but the footprint is broader than necessary: it mines local session history, scans cross-repo directories, clones arbitrary URLs, and forwards results to custom Oracle tooling. The key risk is reliance on an unverifiable local dig script plus custom Oracle data flows, which makes the skill high risk even without clear malicious intent.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Jul 29, 2026, 02:57 AM
Package URL
pkg:socket/skills-sh/Soul-Brews-Studio%2Farra-oracle-skills-cli%2Ftrace%2F@5a1b28f9ae352d4b89ca00387ed801628c991ff70e7ba2d6c5b6edb6c6e956ac
Security Audit — socket — trace