skills/tomevault-io/skills-registry/threat-advisory/Socket

threat-advisory

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated goal is plausible, but it relies on opaque external code, uses AWS credentials without explaining that requirement in the user-facing purpose, and may send environment inventory off-host to unspecified endpoints. This is not confirmed malware, but the trust and data-flow picture is incomplete enough to warrant caution.

Confidence: 77%Severity: 56%

Audit Metadata

Analyzed At

Jul 9, 2026, 01:21 AM

Package URL

pkg:socket/skills-sh/tomevault-io%2Fskills-registry%2Fthreat-advisory%2F@de5a553d0f82e942af28d10e75d46eae6e4adb0a12436b21eee82545ff3af4c3