research

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated research purpose is plausible, but the footprint is broader than necessary. The main risks are autonomous execution without user checkpoints, processing untrusted external content while retaining write/exec paths, and dependence on other undefined skills. No direct credential harvesting or clear exfiltration endpoint appears in this file, so this is not confirmed malware.

Confidence: 84%Severity: 67%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:04 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fresearch%2F@2e24d231f771db1bf8a67023b0d49e29eac3dbf9
Security Audit — socket — research