Cypress Visual Regression Testing Suite

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose is coherent, but its actual function is mainly to install another remotely hosted skill, creating transitive trust and unreviewed permission inheritance. The npm/GitHub path is same-org and plausible, which lowers malware likelihood, but unpinned remote installs and the mismatched OpenClaw command keep overall risk at medium.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Oct 14, 2026, 09:24 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fcypress-visual-regression-testing-suite%2F@4706029a34d7753977ef299026c97bc4698a2cb2