find-skills

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL_CN.md

The code fragment is a coherent, benign documentation piece for a Skills discovery and installation helper. It does not introduce unexpected capabilities, credential requirements, or data exfiltration paths beyond normal CLI interactions with public registries and GitHub-hosted skills. While it references external sources and installation steps, these are standard for ecosystem tooling and are appropriate to the stated purpose. No hidden or autonomous actions are evident. Recommend benign security posture with typical user-driven installation risks (e.g., ensure trust in discovered skills, review permissions before installation).

Confidence: 70%Severity: 65%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:16 PM
Package URL
pkg:socket/skills-sh/lingxling%2Fawesome-skills-cn%2Ffind-skills%2F@431f5d2c4d9404d7091c07999d4a2307fde0014e