skills/stylusnexus/skill-loop/sl/Socket

sl

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches skill-management functions, but the skill is mostly a thin wrapper around an external MCP server installed and run via unpinned `npx`. The main concern is transitive trust and external tool execution, not confirmed malicious behavior.

Confidence: 77%Severity: 56%

Audit Metadata

Analyzed At

May 16, 2026, 07:07 PM

Package URL

pkg:socket/skills-sh/stylusnexus%2Fskill-loop%2Fsl%2F@0134d436c3a11ef527f05bfb2cc78baceb995df3