skills/jeremylongshore/claude-code-plugins-plus/overnight-development/Socket

overnight-development

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill does not show clear credential theft or exfiltration, but its broad shell permissions and autonomous overnight-development framing are more expansive than the sparse, generic Git-hook/TDD description. Supply-chain risk is moderate due to unclear canonical distribution in external evidence, though the supplied file itself contains no direct download-execute behavior.

Confidence: 81%Severity: 61%

Audit Metadata

Analyzed At

Apr 4, 2026, 01:55 PM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus%2Fovernight-development%2F@ab27e526116162abea3462295d32b6dd695cb7ba