Skills
skills/lovstudio/skills/paid-add/Socket

paid-add

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The claimed function is trivial, but the skill hides its real behavior behind encrypted instructions fetched/decrypted through an external CLI and may trigger transitive skill installation. This footprint is disproportionate to summing two numbers and prevents meaningful review of capabilities or data flows.

Confidence: 95%Severity: 86%
Audit Metadata
Analyzed At
Apr 19, 2026, 06:28 AM
Package URL
pkg:socket/skills-sh/lovstudio%2Fskills%2Fpaid-add%2F@707d0efa33e1af62b1407760f24a68bea799a3bb