skills/inferencesh/skills/agent-tools/Socket

agent-tools

Fail

Audited by Socket on Mar 23, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS: The skill is broadly aligned with its claimed purpose and uses same-org installer/API domains, so it is not clearly malicious. However, it carries meaningful risk from a pipe-to-shell installer, credential-bearing external CLI usage, social-media automation with real-world effects, and transitive installation of additional skills.

Confidence: 83%Severity: 68%

Audit Metadata

Analyzed At

Mar 23, 2026, 10:48 AM

Package URL

pkg:socket/skills-sh/inferencesh%2Fskills%2Fagent-tools%2F@07fff5cd7b40cd49a49c5d86527de42fae02b476