skills/will-ness-ai/skills/sandcastle/Socket

sandcastle

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it has meaningful security risk from an install-command mismatch, AFK autonomous push/PR behavior, external ticket-driven agent execution, and credential forwarding into third-party orchestration. This is not confirmed malware, but it is higher-risk than a normal documentation or repo-helper skill.

Confidence: 88%Severity: 69%

Audit Metadata

Analyzed At

Jul 16, 2026, 04:57 PM

Package URL

pkg:socket/skills-sh/will-ness-ai%2Fskills%2Fsandcastle%2F@1eea40c9890b4f4f9279e931e1db6b432b98988d2e2c906e20a9326f5c068803