electron-candidate-discovery

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent, but its stated purpose is to help identify third-party Electron apps that are easiest to patch and redistribute, which is offensive target-selection guidance. It does not install tools, request credentials, or exfiltrate data, so this is not confirmed malware, but it is a high-risk exploit-oriented skill.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/specterops%2Fskills%2Felectron-candidate-discovery%2F@c23857e7088ee41495194c45c89361bcaeedae7c4c40197087b2e2336572434d