skills/inference-sh/skills/ai-rag-pipeline/Socket

ai-rag-pipeline

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s main behavior matches its stated RAG purpose, and the infsh installer appears to be same-org official. Risk comes from unpinned curl|sh installation, broad Bash access, processing untrusted web content with action capability, and explicit transitive installation of other skills.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Apr 23, 2026, 12:24 AM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fai-rag-pipeline%2F@c610954d15a075bf165fe5c654db48c1175952cb