skills/zaoqu-liu/scienceclaw/tooluniverse-install-skills/Socket

tooluniverse-install-skills

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose as a ToolUniverse bootstrap installer, but it is still risky because it transitively installs many other skills and copies unpinned GitHub content directly into agent skill directories. Same-org provenance lowers concern, yet mutable remote content and transitive installation keep this above benign.

Confidence: 90%Severity: 68%

Audit Metadata

Analyzed At

Apr 16, 2026, 08:28 AM

Package URL

pkg:socket/skills-sh/Zaoqu-Liu%2FScienceClaw%2Ftooluniverse-install-skills%2F@183d13f74434fea2a5fc46f91e49fc2e08faef81