source-command-compound-extended

Warn

Audited by Socket on May 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible skill is a thin wrapper around a local Bash script with unclear data boundaries. There is no direct evidence of malware or credential theft in the provided text, but the opaque bridge script and broad workspace fallback make the actual footprint insufficiently transparent for a benign classification.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
May 12, 2026, 10:57 AM
Package URL
pkg:socket/skills-sh/vamseeachanta%2Fworkspace-hub%2Fsource-command-compound-extended%2F@306585d5dbc40e0f8cb2e9d90b7fddfb55826f8e