build-skill

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's main behavior is consistent with building agent skills, but it materially extends trust by making a third-party research plugin mandatory and by instructing installation of external skills/plugins. Data flows otherwise align with the purpose, and the flagged destructive/exfiltration items are mostly documentation artifacts rather than malware indicators.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Oct 21, 2026, 05:14 PM
Package URL
pkg:socket/skills-sh/yigitkonur%2Fskills-by-yigitkonur%2Fbuild-skill%2F@3f1a6534e72f49c15f64ffed40fa9a613c993fc609f58bb6f5e7db1cf1639042