skills/ycmjason/tixmd/tixmd-list/Socket

tixmd-list

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capability align, but it relies on unpinned transient execution of an external CLI whose official publisher provenance was not verified from the evidence. No credential harvesting or overt exfiltration is shown, so this looks like supply-chain risk rather than confirmed malicious intent.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Mar 22, 2026, 05:34 PM

Package URL

pkg:socket/skills-sh/ycmjason%2Ftixmd%2Ftixmd-list%2F@93448e50c5ea5d4cf9a095f1af6bda760ad2af3e