product-skills

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose is coherent, and the visible content is mostly a benign index for product-related sub-skills and local Python tools. However, it instructs installation through an unrelated third-party CLI, creating supply-chain and transitive-trust risk; this is the main concern rather than confirmed malicious behavior.

Confidence: 86%Severity: 63%
Audit Metadata
Analyzed At
Apr 11, 2026, 11:12 PM
Package URL
pkg:socket/skills-sh/alirezarezvani%2Fclaude-skills%2Fproduct-skills%2F@30615dfa31958a56bf923bd46160b52d247a4be0