skills/wisdom-in-a-nutshell/agents/find-skills/Socket

find-skills

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, and the CLI appears to be official, but this skill is fundamentally a transitive installer for third-party skills from broad sources. The main risk is not the finder itself; it is the trust expansion to unreviewed downstream skills plus unpinned `npx`/install targets and prompt-skipping install guidance.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Jul 20, 2026, 11:07 AM

Package URL

pkg:socket/skills-sh/wisdom-in-a-nutshell%2Fagents%2Ffind-skills%2F@b146008599c31057cef1c145774cea5d5afb30e8f43fa802e47a4b461419aaaf