skills/tt-a1i/agents-market/agents-market-installer/Socket

agents-market-installer

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's stated purpose matches agent-pack installation, but it relies on a GitHub-executed CLI and performs transitive installation of additional subagents from external registries. That combination creates significant supply-chain and prompt-trust risk even without clear evidence of overt malware.

Confidence: 85%Severity: 82%

Audit Metadata

Analyzed At

Aug 18, 2026, 01:14 AM

Package URL

pkg:socket/skills-sh/tt-a1i%2Fagents-market%2Fagents-market-installer%2F@0f4bca2f86830ecec1d163ef6c996d12adc7f372b0903bd6b64afb959590b679