skills/zhaoxuya520/ai-fullstack-delivery-workflow/competition-graphql-rpc-drift/Socket

competition-graphql-rpc-drift

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is a CTF/offensive analysis workflow for discovering hidden or privileged GraphQL/RPC behavior. It does not show credential harvesting, exfiltration, or malicious install behavior, yet it enables higher-risk security investigation capabilities and relies on upstream skill trust.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Jul 30, 2026, 12:52 PM

Package URL

pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-graphql-rpc-drift%2F@dc55e8d74bdc1ecbfb7974cc1ba91476ad7b02a8ae224203fd080648f843d123