work-with

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's collaboration purpose is plausible, but its actual footprint includes outbound messaging, fleet broadcasts, invite orchestration, GitHub posting, and processing of untrusted remote content. The main concern is not clear malware behavior, but broad communication autonomy plus reliance on an only partially verifiable external transport tool.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Jun 18, 2026, 01:17 PM
Package URL
pkg:socket/skills-sh/soul-brews-studio%2Foracle-skills-cli%2Fwork-with%2F@38b9f5fcce1b114b2f940c7eb0c14ef06d9ff2cac71453f4ab7606b6c27cc317
Security Audit — socket — work-with