find-skills

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, and its CLI/docs appear official, but it instructs the agent to install other skills from an open ecosystem. That transitive trust is the main risk: the reviewed skill is mostly a launcher for externally authored instructions that may later gain broad agent capabilities.

Confidence: 90%Severity: 62%
Audit Metadata
Analyzed At
Sep 24, 2026, 05:37 AM
Package URL
pkg:socket/skills-sh/tongbei821%2Fcustomize-skills%2Ffind-skills%2F@eb4e6b670cb814b60cf97108272d4c2035f7f99e13ae95fe3476e17813376188