skills-marketplace-readiness

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
eval/fixtures/repos/safety-skill-without-eval/skills/payment/SKILL.md

This skill is not overt malware and contains no installer, code execution, or explicit exfiltration path, but it authorizes autonomous financial actions with no safeguards. That makes it high-risk as an AI agent skill despite its minimal content.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Jul 23, 2026, 07:14 AM
Package URL
pkg:socket/skills-sh/wakqasahmed%2Fskills%2Fskills-marketplace-readiness%2F@a41a76790db28004499c412f9583fc6212bfce9f957462a012ed0b649eaab1b3
Security Audit — socket — skills-marketplace-readiness