day2-mcp-and-context-sync

Warn

Audited by Socket on Mar 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The fragment is a coherent, purpose-aligned training scaffold for MCP and Context Sync with standard install steps from public registries. There are no evident malicious payloads, credential harvesting hooks, or data exfiltration mechanisms inherent to the fragment. The primary concerns are typical supply-chain risk from dynamic skill installation (npx/npm) and the potential for automated tool interactions that could be abused if executed by an untrusted agent. Overall, classify as BENIGN with elevated caution due to dynamic install/execution patterns.

Confidence: 70%Severity: 65%
Audit Metadata
Analyzed At
Mar 2, 2026, 10:56 AM
Package URL
pkg:socket/skills-sh/ai-native-camp%2Fcamp-2%2Fday2-mcp-and-context-sync%2F@74959e86d1f5b08f682f3110a51f58c8006fbe57