skills/inference-sh/agent-skills-registry/related-skill/Socket

related-skill

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's stated purpose matches its behavior, but that behavior is inherently high-trust because it installs other skills. The main risk is transitive trust expansion through unpinned `npx skills` execution and downstream skill installation, not direct credential theft or exfiltration in this skill itself.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Mar 18, 2026, 10:29 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fagent-skills-registry%2Frelated-skill%2F@866d493eb012a09154b23967e093ddb1793f6638