skills/tinh2/skills-hub-registry/marketing-refresh/Socket

marketing-refresh

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is plausible, but its footprint is broad and highly autonomous. The main risks are home-directory repo scanning, ingestion of untrusted web/forum content while retaining write capability, and silent local telemetry; there is no evidence of credential harvesting, external exfiltration, or malicious installers.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Mar 23, 2026, 11:03 AM

Package URL

pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fmarketing-refresh%2F@baa68c1a37393be092d7ed92d28a7ab867713fb8