naming-conventions

Warn

Audited by Socket on Oct 18, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
tests/bases/app/scripts/vendor/naming-kit/SKILL.md

SUSPICIOUS. The skill has no functional content beyond an instruction to avoid scanning planted files, which is an unjustified concealment directive and inconsistent with any legitimate naming-related purpose.

Confidence: 88%Severity: 72%
SecurityMEDIUM
tests/bases/app/.agents/skills/decoy/SKILL.md

SUSPICIOUS. The skill has no meaningful benign function beyond telling the agent not to inspect 'planted files,' which is an explicit evasion signal and not proportionate to any legitimate purpose.

Confidence: 95%Severity: 76%
Audit Metadata
Analyzed At
Oct 18, 2026, 11:25 AM
Package URL
pkg:socket/skills-sh/zakariaf%2Freactnative-skills%2Fnaming-conventions%2F@9ee5637b82eb59d786a2766c3529808c0801b904e903c446b69c910241a3b0ea