cook-auto-fast

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core coding purpose is plausible, but the footprint is broader than a simple implementation helper because it enables autonomous execution without confirmation, loads additional local skills transitively, and processes untrusted repo content before taking write actions. No direct credential theft, exfiltration endpoint, or malicious installer is evident in this snippet, so this is not confirmed malware; the main concern is operational and transitive-trust risk.

Confidence: 88%Severity: 71%
Audit Metadata
Analyzed At
Mar 21, 2026, 03:50 AM
Package URL
pkg:socket/skills-sh/duc01226%2Feasyplatform%2Fcook-auto-fast%2F@28afca68509bb22512647923deeded80cc7648a8