apex

Warn

Audited by Socket on Jul 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible, but it is an overpowered router that delegates to unseen subskills, creating transitive trust and autonomy risk. No direct malware or credential-exfiltration behavior is visible, but the broad permissions and hidden downstream behavior make it medium risk.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 1, 2026, 02:47 PM
Package URL
pkg:socket/skills-sh/tonone-ai%2Ftonone%2Fapex%2F@f949d7bf3721383e4f4c478ea6d24d0ee12fd5d600b3c6ae142281095f09811a
Security Audit — socket — apex