skills/athola/claude-night-market/code-communities/Socket

code-communities

Warn

Audited by Socket on May 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent and mostly local, but it relies on executing an unverified plugin discovered from ~/.claude/plugins. There is no evident credential theft or exfiltration, yet the local-plugin trust boundary makes the skill medium risk.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

May 9, 2026, 07:38 AM

Package URL

pkg:socket/skills-sh/athola%2Fclaude-night-market%2Fcode-communities%2F@cb009ba7b3f3d46962ae7378e7fa3b3a0f228964