spike

Pass

Audited by Socket on Oct 29, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Oct 29, 2026, 10:17 PM
Package URL
pkg:socket/skills-sh/undermybelt%2Fhermes-skills%2Fspike%2F@3e8038ca928b4214dcd03b66a1bf315b4dedd1c45bc51737365707c3bc82ff29