commodity-pricing

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The main code-review purpose is plausible, but the skill is over-broad and includes unrelated local memory inspection/writes plus unverified follow-on slash commands. No clear malware or external credential exfiltration is present, but autonomy, transitive trust, and out-of-scope telemetry make the footprint disproportionate to a pure commodity-pricing analysis skill.

Confidence: 86%Severity: 61%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:00 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fcommodity-pricing%2F@ed0fa3f4936c0f11afaedd112c661f30049de14d
Security Audit — socket — commodity-pricing