skills/ykdojo/claude-code-tips/version-check/Socket

version-check

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core version-checking purpose is mostly coherent and official npm/GitHub sources are used, but the skill’s footprint expands into third-party container usage, transitive skill installation, and untrusted community-content ingestion with command-capable tools. Not malware, but broader and riskier than a simple version recommendation helper needs to be.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Aug 5, 2026, 02:17 AM

Package URL

pkg:socket/skills-sh/ykdojo%2Fclaude-code-tips%2Fversion-check%2F@e2777c67cdfa5728de278e669cd08d84a17cf31d916d3dcf19b234d9bbd526ec