find-skills

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose matches its behavior, and it uses an official CLI path, but its main function is transitive installation of additional skills from potentially untrusted external sources. The biggest risk is expanding agent capabilities by importing third-party instructions with global, prompt-skipping install commands.

Confidence: 91%Severity: 62%
Audit Metadata
Analyzed At
Aug 10, 2026, 01:27 PM
Package URL
pkg:socket/skills-sh/the-utopia-studio%2Fskills%2Ffind-skills%2F@9e1c8b3103f92fa8092568a44fe64858de7c5c9dc65ce4bea8f168080e889cfd
Security Audit — socket — find-skills