remove-old-skills-from-workflow

Fail

Audited by Socket on Feb 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The code fragment is a benign, well-scoped maintenance guide for removing a skill from a workflow and updating related documentation. It does not introduce or request credentials, nor does it perform any network activity or data exfiltration. The footprint (file deletions, JSON edits, documentation updates) is coherent with the stated purpose. Some minor operational risk exists due to reliance on manual steps, but nothing indicates malicious intent or security risk beyond standard user error potential.

Confidence: 34%Severity: 25%
Audit Metadata
Analyzed At
Feb 15, 2026, 08:13 PM
Package URL
pkg:socket/skills-sh/nicepkg%2Fai-workflow%2Fremove-old-skills-from-workflow%2F@49d3a7c55d81a3c8891d382b2f549deca899fc1e