skills/xiaomingx/mimofan/skill-installer/Socket

skill-installer

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s behavior matches its stated purpose, but that purpose is to install and trust other skills from arbitrary GitHub repos. The main risk is transitive trust and prompt-injection/supply-chain exposure from third-party skills, not confirmed malware in this installer itself.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

Aug 14, 2026, 10:46 AM

Package URL

pkg:socket/skills-sh/xiaomingx%2Fmimofan%2Fskill-installer%2F@ecda5e647d86e70b6c2bdcfc0af23dd33fe10416547d664e8cf9c650793490e7