skills/cnife/skills/skill-evaluator/Socket

skill-evaluator

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its behavior, but its footprint is inherently high-risk because it installs and operationalizes other skills from external registries and repositories. The main concern is transitive trust and untrusted-content processing, not confirmed malicious intent.

Confidence: 89%Severity: 79%

Audit Metadata

Analyzed At

Apr 27, 2026, 01:34 AM

Package URL

pkg:socket/skills-sh/CNife%2Fskills%2Fskill-evaluator%2F@037a087ae27910af5a214f8180aa1abb98247d59