skills/tt-a1i/matt-skills-with-to-goal/to-spec/Socket

to-spec

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core behavior fits the stated purpose, but the skill relies on transitive installation/setup of another skill and performs autonomous external posting to an issue tracker. No direct malware indicators or credential-exfiltration flow are present in this file, but the trust chain and external write action make it moderately risky.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Jul 22, 2026, 10:37 AM

Package URL

pkg:socket/skills-sh/tt-a1i%2Fmatt-skills-with-to-goal%2Fto-spec%2F@cd37a7e35c3812350c9f5c7bcebac95b3925dcff6a3b0655b3aea87229c52447