skills/inference-sh/agent-skills-registry/ai-rag-pipeline/Socket

ai-rag-pipeline

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s main behavior matches its stated RAG purpose, and the infsh installer appears to be same-org official. Risk comes from unpinned curl|sh installation, broad Bash access, processing untrusted web content with action capability, and explicit transitive installation of other skills.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Mar 18, 2026, 10:34 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fagent-skills-registry%2Fai-rag-pipeline%2F@3be4496ccafb71335ce5010e43f93ae314c9d5da