zeude

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core purpose is coherent for enterprise adoption analytics, but the actual footprint is broad: command interception, prompt telemetry, centralized hook/skill deployment, and a mismatched third-party skill install path. The combination creates meaningful supply-chain and transitive-trust risk even without clear proof of malicious intent.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Apr 24, 2026, 02:49 AM
Package URL
pkg:socket/skills-sh/akillness%2Foh-my-skills%2Fzeude%2F@c72761cb0012aac1d290838a8c53553df02dc4ce