product-validation

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Mostly coherent and purpose-aligned product validation skill with restrained scope and explicit safety boundaries. Main risk is the optional `manuvra` CLI: it is referenced as executable tooling but its provenance is not established, making this a suspicious supply-chain dependency rather than clear malware. No credential harvesting, stealth, proxy routing, or exfiltration behavior is evident in the skill text.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Sep 21, 2026, 07:22 PM
Package URL
pkg:socket/skills-sh/taecontrol%2Fskills%2Fproduct-validation%2F@d01c981a6f14450c698f5eed9b4f8730c078d6aa5d038890e18ef8647c9eb2a3
Security Audit — socket — product-validation