banana-skill-finder

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's behavior matches its stated purpose, but that purpose is to proactively search for and install other skills, creating significant transitive trust risk. Official endpoints and an official CLI reduce direct malware concerns, yet encouraging installation of arbitrary third-party skills is disproportionate enough to classify the skill as suspicious rather than benign.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Oct 9, 2026, 11:37 AM
Package URL
pkg:socket/skills-sh/treydong%2Fbanana-skills%2Fbanana-skill-finder%2F@3f8459a25d9de53714d80d333ebc76d07378b140786817977f5583a865659ad1