skills/zhaoxuya520/ai-fullstack-delivery-workflow/competition-bundle-sourcemap-recovery/Socket

competition-bundle-sourcemap-recovery

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent for CTF bundle/source-map recovery and shows no direct credential theft or exfiltration, but it equips an AI agent with offensive reverse-engineering workflow and appears to be distributed through a transitive skill-install chain with only medium provenance assurance.

Confidence: 82%Severity: 62%

Audit Metadata

Analyzed At

Jul 30, 2026, 12:52 PM

Package URL

pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-bundle-sourcemap-recovery%2F@fb719d0732e199ef32a59fa0fb50383aa24682cba93182a9ff40d3144b49459c