add-skill

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill is inherently high-risk because it installs arbitrary third-party skills, creating a transitive trust chain and durable prompt/code execution surface beyond the wrapper's own scope.

Confidence: 93%Severity: 88%
Audit Metadata
Analyzed At
Mar 15, 2026, 08:19 AM
Package URL
pkg:socket/skills-sh/family3253%2Fskill%2Fadd-skill%2F@71c15569d1f3aeecf6bf4271f2d830a56ec207ec