skills/volcengine/searchcli/vs-shared/Socket

vs-shared

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core auth/setup behavior fits the stated purpose, and the skill sensibly avoids asking for secrets in chat. The main concern is transitive skill installation via npx skills add and unspecified install provenance for scripts/install.sh, which add medium supply-chain risk without clear verification details.

Confidence: 79%Severity: 58%

Audit Metadata

Analyzed At

Jul 27, 2026, 06:28 AM

Package URL

pkg:socket/skills-sh/volcengine%2FSearchCLI%2Fvs-shared%2F@342d75d700fadc16e5e3098216e2bf08a224533295fcd3b89093484e3b572018