skills/starchild-ai-agent/official-skills/skill-manager/Socket

skill-manager

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose generally matches its actions, but it materially expands agent trust by auto-installing third-party skills and forwarding OIDC-backed publish/delete requests to a less-verifiable gateway. The biggest risk is transitive installation of external skills with default auto-install, not confirmed malware.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Jul 23, 2026, 01:20 AM

Package URL

pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Fskill-manager%2F@943475d4a350958e7bddf7d7a667287d502c21d4e00b6ccafad38fb4037c409d