skills/uinaf/slopshipper/slopomatic/Socket

slopomatic

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's stated workflow purpose is coherent, and it avoids inline download/install behavior, but its entire function depends on an unverified external `slopomatic` CLI plus an ambiguous `autoreview` companion. The main risk is supply-chain and opaque third-party execution rather than confirmed malware or explicit exfiltration.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Aug 10, 2026, 07:07 AM

Package URL

pkg:socket/skills-sh/uinaf%2Fslopomatic%2Fslopomatic%2F@1ead8e8b6bec6dcea26b851fc750ac4983120bb83c166fb4acebc5f5af95a5ae