blog

Pass

Audited by Socket on Oct 12, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Oct 12, 2026, 03:30 PM
Package URL
pkg:socket/skills-sh/yan-labs%2Fyan-skills%2Fblog%2F@8c607610ae370e326962d9a6577d3637312eecc869d840fae012c3f761c2a91b