skills/alphaonedev/openclaw-graph/things-mac/Socket

things-mac

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: this is a minimal discovery/install wrapper whose real effect is to install another registry-hosted skill. It does not show credential theft or exfiltration, but its purpose is mostly transitive installation through an unpinned external trust chain with partially unverifiable registry provenance.

Confidence: 83%Severity: 61%

Audit Metadata

Analyzed At

Mar 15, 2026, 07:48 PM

Package URL

pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Fthings-mac%2F@1c27c2358757e2834aaca3fa1c9c3f2619e85564