skills/tusharkrbarman/skills-for-open-code/configure-ecc/Socket

configure-ecc

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's behavior is mostly coherent with its stated purpose as an ECC installer, but it performs transitive installation of many other skills from an unpinned remote GitHub clone. That creates medium supply-chain and trust-chain risk even without signs of credential theft or overtly malicious data flows.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Jun 24, 2026, 12:58 PM

Package URL

pkg:socket/skills-sh/tusharkrbarman%2Fskills-for-open-code%2Fconfigure-ecc%2F@7508dec6efa114a03195ee657f869767928e55ed1d4b4841cce06bb2beed6a08