competitor-teardown

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the skill's footprint depends on an unverified transitive installer (`npx skills add belt-sh/cli`) and routes core research through third-party Belt/inference-managed apps. The capabilities broadly fit competitor research, yet install trust and expanded data flow to intermediary services are not proportionate enough to treat as benign.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Jul 7, 2026, 11:41 PM
Package URL
pkg:socket/skills-sh/101-skills%2Fskills%2Fcompetitor-teardown%2F@2d99f283796874910c52f6f164bb4644762d902425e5210ba01dc625bfc498f7
Security Audit — socket — competitor-teardown