Skills
skills/motiful/booth-skills/booth-check/Socket

booth-check

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the workflow purpose is coherent for a deck QA/check signal, but the skill depends on an unverifiable custom `booth` executable and an unspecified `booth-deck` skill. The main risk is install/execution trust and opaque reporting data flow, not confirmed malware.

Confidence: 81%Severity: 78%
Audit Metadata
Analyzed At
Apr 21, 2026, 03:35 AM
Package URL
pkg:socket/skills-sh/motiful%2Fbooth-skills%2Fbooth-check%2F@3f93aa0774e732b8623e084b0e6016ddc7a0b59c