install-bensz-skills

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as a system-wide installer, but it carries medium risk because it installs other skills globally and supports unattended remote installation from mutable GitHub branches. The main concern is transitive trust expansion, not confirmed malware or credential theft.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Apr 3, 2026, 04:11 PM
Package URL
pkg:socket/skills-sh/huangwb8%2Fskills%2Finstall-bensz-skills%2F@d4798a38d1e4ce3bddfffd2e4edfd39fce19c5d4