recipient-first

Pass

Audited by Socket on Aug 12, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Aug 12, 2026, 02:50 AM

Package URL

pkg:socket/skills-sh/yamadashy%2Fskills%2Frecipient-first%2F@3b5e1805edf80a3cbad5fc6fb5fbc7364d5eb08ee057dffd8591b6e814354545