skills/umeranjum17/learn-from-mistakes/lfm-retro/Socket

lfm-retro

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it relies on repeated unpinned npx execution of a third-party CLI and likely forwards project context/evidence to external analysis backends. This looks more like medium supply-chain and data-sharing risk than confirmed malicious behavior.

Confidence: 79%Severity: 64%

Audit Metadata

Analyzed At

Oct 26, 2026, 05:35 AM

Package URL

pkg:socket/skills-sh/umeranjum17%2Flearn-from-mistakes%2Flfm-retro%2F@d0b30f0d5995d964e44836b627107d3b0d398195b099f9996fcde3c1ff70d3e1