ai-rag-pipeline

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it relies on transitive skill installation, broad Bash access, and a gateway CLI whose install instructions do not cleanly match official docs. Data flows are plausible for a hosted RAG platform, yet user queries and retrieved content are funneled through third-party services, so overall risk is medium rather than benign.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Aug 6, 2026, 05:03 AM
Package URL
pkg:socket/skills-sh/whytryharder%2Fskills%2Fai-rag-pipeline%2F@fdf33938a32672612d753ecc1743c4c8c7486d439482e8f2b3ebf098b3708578
Security Audit — socket — ai-rag-pipeline