to-spec

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core purpose is coherent, but this variant adds an unverified transitive setup command and enables autonomous external posting. The mismatch with the upstream official setup name is the strongest concern; combined with issue-tracker publishing, this makes the skill medium-high risk rather than benign.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Aug 16, 2026, 04:31 AM
Package URL
pkg:socket/skills-sh/utarn%2Fengineer-skills%2Fto-spec%2F@29f55cda98e516534420c28cff3bba52cc331c591c45719c87faaa9822d1a14a
Security Audit — socket — to-spec