sponge

Pass

Audited by Socket on Jun 14, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Jun 14, 2026, 01:54 AM
Package URL
pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Fsponge%2F@dad7b24082e927370aab38553438010370042e95893f06b5b038087a2423255c
Security Audit — socket — sponge