skills/hillstone-networks/agent-skills/project-initializer/Socket

project-initializer

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly aligned with project scaffolding, but it has a sizable execution footprint: it runs helper scripts, installs third-party CLIs via npm/npx/uv, and can generate CI/deployment assets. The main concern is supply-chain and command-execution trust from unpinned external installers, not clear credential theft or exfiltration.

Confidence: 81%Severity: 58%

Audit Metadata

Analyzed At

Mar 14, 2026, 06:38 AM

Package URL

pkg:socket/skills-sh/hillstone-networks%2Fagent-skills%2Fproject-initializer%2F@7e031c3f6f6b1ba9fd444b7bbc39a42d3681fed7