auto-skill

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the mandatory linked third-party generator tool and bootstrap path expand trust beyond what the skill itself explains. Main concern is supply-chain and untrusted-content-to-generated-skill flow, not confirmed malware.

Confidence: 81%Severity: 63%
Audit Metadata
Analyzed At
Sep 13, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/tradecatlabs%2Fvibe-coding-cn%2Fauto-skill%2F@5bb8752d360bb127c55a499ba1995e2183a2a69565c6ee4d73787657055d5b97