to-spec

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core purpose is coherent, but this variant adds an unverified transitive setup command and enables autonomous external posting. The mismatch with the upstream official setup name is the strongest concern; combined with issue-tracker publishing, this makes the skill medium-high risk rather than benign.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Aug 16, 2026, 04:31 AM
Package URL
pkg:socket/skills-sh/utarn%2Fengineer-skills%2Fto-spec%2F@29f55cda98e516534420c28cff3bba52cc331c591c45719c87faaa9822d1a14a