project-bootstrap

Fail

Audited by Socket on Feb 27, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

Benign: The code fragment is a high-level skill manifest describing a multi-phase bootstrap workflow for Doc Detective. There are no embedded download/execute patterns, credential reads, or data exfiltration routes in the fragment itself. Unless the consuming implementation introduces risky behaviors (downloads, credential access, or remote commands), the footprint remains consistent with a procedural blueprint for legitimate developer tooling.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 27, 2026, 06:56 AM
Package URL
pkg:socket/skills-sh/doc-detective%2Fagent-tools%2Fproject-bootstrap%2F@9dcca26cc8bb974fa9eee4db0dddea689d5bf53c