skills/vdustr/skills/vp-skills/Socket

vp-skills

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose and uses an official CLI, but its core function is transitive skill installation and management across broad remote sources. This is not confirmed malware, yet it meaningfully expands the agent's trust chain and can write globally across agents, so the overall risk is medium.

Confidence: 91%Severity: 56%

Audit Metadata

Analyzed At

Oct 6, 2026, 10:06 AM

Package URL

pkg:socket/skills-sh/vdustr%2Fskills%2Fvp-skills%2F@7db5dfb7d58717cb678bf172a3999939d96c9aa60de9ad976f93f55e5b2d2018