skills/tamdogood/builder-essential-skills/lead/Socket

lead

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is purpose-consistent and uses official GitHub tooling, but it grants the agent high-autonomy write/merge powers and mixes untrusted GitHub/repo content with command execution and subagent dispatch. The main concern is operational and prompt-injection risk, not malware or credential theft.

Confidence: 88%Severity: 76%

Audit Metadata

Analyzed At

Aug 10, 2026, 02:51 PM

Package URL

pkg:socket/skills-sh/tamdogood%2Fbuilder-essential-skills%2Flead%2F@922d33be1fd1c32b8d75a8cc7ee5f86125f251b9b4a78e31f963d01d5867760d