skills/zapabob/skills/git4d-schema/Socket

git4d-schema

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The runtime behavior described is mostly coherent for a local schema auditor, but the install path is the main problem. It relies on an unpinned, third-party GitHub skill repository that is not publicly verifiable from the provided evidence and uses nonstandard install syntax, creating a disproportionate transitive supply-chain trust risk.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

Sep 5, 2026, 12:08 PM

Package URL

pkg:socket/skills-sh/zapabob%2Fskills%2Fgit4d-schema%2F@921aad24bf65a915a1b0445652cff598b89e55e7f16d866ad891fbc44d58acb2