skills/tanishqkancharla/diffmap/code-walkthrough/Socket

code-walkthrough

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it relies on executing a third-party npm package via `npx` and can upload repo-derived content externally as an unlisted gist. This looks more like supply-chain and disclosure risk than malicious intent.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Sep 25, 2026, 01:29 PM

Package URL

pkg:socket/skills-sh/tanishqkancharla%2Fdiffmap%2Fcode-walkthrough%2F@21f59b511a17e667e2a2e432e57c76ebb5b860042a44e0afba379fd5a1c9376b