skills/alphaonedev/openclaw-graph/gifgrep/Socket

gifgrep

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is narrow and benign, but the skill primarily instructs the agent to install another unpinned skill whose specific provenance is not verified. The official ClawHub install path reduces maliciousness concerns, yet the transitive trust chain and weak source clarity make this medium risk.

Confidence: 85%Severity: 64%

Audit Metadata

Analyzed At

Mar 15, 2026, 07:48 PM

Package URL

pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Fgifgrep%2F@1aade1281e54694cec8bac96eddfd10e7089aa82