sepa-strategy

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core SEPA-analysis purpose is coherent and mostly read-only, but the optional funda-data path introduces medium supply-chain and credential-forwarding risk because it appears to rely on a third-party skill wrapper rather than a clearly official vendor package. Without that wrapper, the skill would be largely benign.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Oct 20, 2026, 08:28 AM
Package URL
pkg:socket/skills-sh/undermybelt%2Fhermes-skills%2Fsepa-strategy%2F@2b94fcf8bbae08b6865c73a7313635f38f8668a29b56683be97fe1b3f5eb3fef