onboarding

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent with LaunchDarkly onboarding and uses proportionate LaunchDarkly credentials, but it expands trust by installing additional skills and relying on npx-based tooling/MCP paths. This looks more like a legitimate but medium-risk orchestration skill than malware.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 25, 2026, 04:20 PM
Package URL
pkg:socket/skills-sh/launchdarkly%2Fagent-skills%2Fonboarding%2F@760cf4c6b9a11bab67bc749091cbe1082158cc06