skills/inference-sh-3/skills/product-changelog/Socket

product-changelog

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's high-level purpose is coherent, but it expands into external CLI use, remote app execution, browser fetching, and installation of other skills. The main concerns are supply-chain trust for `infsh`, credential/session forwarding to external tooling, and transitive skill installation rather than confirmed malicious behavior.

Confidence: 80%Severity: 58%

Audit Metadata

Analyzed At

Mar 25, 2026, 01:01 AM

Package URL

pkg:socket/skills-sh/inference-sh-3%2Fskills%2Fproduct-changelog%2F@c0f5e533c655b0aaa2a4f5c6484e640243797006