unique-club-founder-kit

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose as a navigation layer is coherent, and it does not request credentials or perform direct exfiltration. However, its main function includes installing additional skills from a GitHub repository via the skills CLI, creating a transitive trust chain. Because the install source is mutable and the claimed UniqueClub publisher relationship to the `wulaosiji` GitHub owner is not strongly verifiable from the provided evidence, the skill is higher risk than a normal documentation-only navigator but not malicious.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 03:56 AM
Package URL
pkg:socket/skills-sh/wulaosiji%2Ffounder-skills%2Funique-club-founder-kit%2F@6d3ed3009260c7605a25304cf06ff8386c16be1e36db1c0313da726d71241c88