project-builder

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's broad engineering capabilities mostly match its stated purpose, and there is no obvious malware, installer abuse, or hidden exfiltration in the supplied text. However, mandatory routing through an unspecified sc-proxy, possible credential forwarding to proxied third-party services, and the ability to publish or schedule persistent actions make the overall security posture medium risk rather than benign.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
May 14, 2026, 07:37 AM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Fproject-builder%2F@13080a887acb38325a6f472cc21806b4e5e7005c