skills/inference-sh/skills/product-changelog/Socket

product-changelog

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's high-level purpose is coherent, but it expands into external CLI use, remote app execution, browser fetching, and installation of other skills. The main concerns are supply-chain trust for `infsh`, credential/session forwarding to external tooling, and transitive skill installation rather than confirmed malicious behavior.

Confidence: 80%Severity: 58%

Audit Metadata

Analyzed At

Apr 23, 2026, 07:52 AM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fproduct-changelog%2F@6e85cf484d18ee4764d7e369cb71a07ecefec089