skills/trpc-group/trpc-agent-go/skill-find/Socket

skill-find

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the mechanism is inherently high risk because it installs and immediately loads arbitrary third-party skills discovered via web search. The main issue is transitive trust and supply-chain exposure, not overt malware in this skill itself.

Confidence: 92%Severity: 86%

Audit Metadata

Analyzed At

Mar 30, 2026, 01:09 AM

Package URL

pkg:socket/skills-sh/trpc-group%2Ftrpc-agent-go%2Fskill-find%2F@3ecb888d853233d7cee417f731d8698a1ef9f474