skills/zapabob/skills/find-skills/Socket

find-skills

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent with its purpose, and the CLI provenance appears official and documented. The main risk is transitive trust: this skill exists to install additional skills, including third-party ones, which inherit the agent’s trust boundary; that makes it high-risk but not malicious.

Confidence: 92%Severity: 74%

Audit Metadata

Analyzed At

Sep 5, 2026, 12:08 PM

Package URL

pkg:socket/skills-sh/zapabob%2Fskills%2Ffind-skills%2F@5eabfae1b3e63cb73475029bc34b3ff6c9ccf9b43ef9732343454760a9515290