go

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to globally install/uninstall other skills through an external CLI. Same-org provenance reduces malware concern, yet the transitive trust chain plus raw GitHub installer and skipped confirmations make this a medium-to-high security risk.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Mar 19, 2026, 02:09 PM
Package URL
pkg:socket/skills-sh/soul-brews-studio%2Foracle-skills-cli%2Fgo%2F@06e76be4f8325b0345cf3c4abc8764a807f11229
Security Audit — socket — go