skills-discovery

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose mostly matches its behavior, and data flows remain local, but it relies on several unverifiable local CLIs/hooks that gate agent behavior machine-wide. The main risk is install/execution trust and broad enforcement scope, not confirmed malware or credential theft.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Jul 31, 2026, 09:57 PM
Package URL
pkg:socket/skills-sh/vahidkaargar%2Fit-department-skills%2Fskills-discovery%2F@b10c22b3a02e331ca5f23dc9408e7528f7c919a5c47713499707694772992f52
Security Audit — socket — skills-discovery