competitive-intelligence

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose is legitimate and there is no evidence of credential theft, malware payloads, or untrusted installers. However, its runtime footprint is broader than necessary for competitive research: it can execute shell commands, modify files, search untrusted web content, and autonomously spawn sub-agents. The main risk is overbroad agent capability and prompt-injection exposure, not confirmed malicious intent.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Mar 25, 2026, 05:14 PM
Package URL
pkg:socket/skills-sh/yohayetsion%2Fproduct-org-os%2Fcompetitive-intelligence%2F@fbf6accddb0be5b12c683fb3f5197f495d32237f