skills/tomwebwalker/skills/qa-local/Socket

qa-local

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated QA purpose is plausible, but the skill lets repo-local markdown and code diffs drive command execution and external ticket updates. The main risk is not overt malware but broad, under-specified execution and content-trust surfaces, plus a transitive skill-install suggestion.

Confidence: 80%Severity: 56%

Audit Metadata

Analyzed At

Aug 11, 2026, 04:41 PM

Package URL

pkg:socket/skills-sh/tomwebwalker%2Fskills%2Fqa-local%2F@153444b9661c02b6a543dc556046ba92ad7685071a50865b9aacdf13f6f1840c