skills/tobihagemann/turbo/update-turbo/Socket

update-turbo

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The stated purpose is plausible, but the skill hands execution control to unpinned remote UPDATE.md content from whatever git remote is configured as origin. The main risk is supply-chain trust and remote instruction execution, not confirmed malware.

Confidence: 87%Severity: 74%

Audit Metadata

Analyzed At

Oct 20, 2026, 10:53 AM

Package URL

pkg:socket/skills-sh/tobihagemann%2Fturbo%2Fupdate-turbo%2F@177c511d3d1b4e44ee5101b5aa4b6c0eb568ef83c6be8f2e55c3b193707ff30d