onboarding
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly coherent with LaunchDarkly onboarding and uses proportionate LaunchDarkly credentials, but it expands trust by installing additional skills and relying on npx-based tooling/MCP paths. This looks more like a legitimate but medium-risk orchestration skill than malware.
Confidence: 84%Severity: 58%
Audit Metadata