ruby-dependency-injection

Warn

Audited by Socket on Jun 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main issue is purpose/install inconsistency: a Ruby DI skill tells users to install Ruby via pip, which does not match official Ruby distribution guidance and may point users to an unrelated third-party package. There is no evidence of credential theft or exfiltration, but the install path is not trustworthy for the stated purpose.

Confidence: 95%Severity: 52%
Audit Metadata
Analyzed At
Jun 27, 2026, 12:46 AM
Package URL
pkg:socket/skills-sh/ssrjkk%2Fclaude-skills%2Fruby-dependency-injection%2F@e6baf4cfb670f8c43941c422b65a92ac339e5e2b16c878fb69ecff5acb18a58c
Security Audit — socket — ruby-dependency-injection