pst-run

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it relies on unverified downstream skills whose provenance, permissions, and data flows are not disclosed. No direct credential theft or exfiltration is shown, yet the transitive skill chain and opaque downstream execution make this higher risk than a standalone local orchestration skill.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 8, 2026, 06:48 PM
Package URL
pkg:socket/skills-sh/lautaroleonhardt%2Fpst%2Fpst-run%2F@433db29a61a3aa18d3036796b049b7c281684465