codekb-extract

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s extraction purpose is coherent, but install trust and data-flow transparency are incomplete. The main concern is the unverified `codekb` CLI dependency and unclear routing of code content/API keys during LLM-powered extraction, not confirmed malicious behavior.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Aug 28, 2026, 03:54 AM
Package URL
pkg:socket/skills-sh/te-quanbzhang%2Fskills-pool%2Fcodekb-extract%2F@ebe28b32f2bf57131c9ba1b0567a4ae551ef5d192b27a2c151b0c63d617ce423
Security Audit — socket — codekb-extract