skills/vm0-ai/vm0-skills/replicas/Socket

replicas

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's core purpose is coherent and it does not contain malware-like execution behavior, but credential provisioning through a non-Replicas third-party connector domain weakens data-flow integrity and increases trust requirements beyond what the stated API helper purpose strictly needs.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Jun 30, 2026, 07:16 AM

Package URL

pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Freplicas%2F@362c437405ee112a52a4cab2e38cfcca98676091f5a09e1f29f6f3213cff7651