skills/yahyabedirhan/skills/make-explainer/Socket

make-explainer

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill's footprint depends on cloning and executing a separate personal GitHub repo and obeying its `AGENTS.md`. The main concern is supply-chain and transitive-instruction trust, not confirmed malware or obvious credential theft.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Oct 5, 2026, 11:57 AM

Package URL

pkg:socket/skills-sh/yahyabedirhan%2Fskills%2Fmake-explainer%2F@968868164d68d366aac0e2845c0a62dd826b92122a9c2ab29fa6561472a24bf2