skills/x-cmd/skill/x-cmd/Socket

x-cmd

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's stated purpose matches its behavior as a bootstrapper, but it is high-trust infrastructure rather than a narrow utility. The main concerns are official-but-risky remote installation, broad execution surface via third-party tool installs, and transitive skill loading through `x skill`. No clear credential theft or covert exfiltration is shown in the provided content.

Confidence: 83%Severity: 71%

Audit Metadata

Analyzed At

Mar 28, 2026, 03:36 AM

Package URL

pkg:socket/skills-sh/x-cmd%2Fskill%2Fx-cmd%2F@c42309547632df5c50b89acafee65906192de74a