skills/uwuclxdy/agenticat/sync-agenticat/Socket

sync-agenticat

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the skill's workflow trusts arbitrary external repos and promotes transitive installation of third-party skills. Main risk is supply-chain plus indirect prompt injection from untrusted harvested content, not confirmed malware or explicit credential theft.

Confidence: 88%Severity: 72%

Audit Metadata

Analyzed At

Jul 14, 2026, 06:31 PM

Package URL

pkg:socket/skills-sh/uwuclxdy%2Fagenticat%2Fsync-agenticat%2F@0f083e6b5f4b7bc90abf5a9c4445f947c80b32d46ac84650b0a95c61b40cd6ba