skills/nickcrew/claude-ctx-plugin/compliance-audit/Socket

compliance-audit

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The core capabilities are mostly consistent with a compliance-audit skill and there is no explicit exfiltration, credential forwarding, or malicious installer behavior. Risk is driven by unverified transitive skill dependencies plus Bash/Write-enabled automation, which expands the effective trust boundary without provenance.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Apr 28, 2026, 07:23 AM

Package URL

pkg:socket/skills-sh/nickcrew%2Fclaude-ctx-plugin%2Fcompliance-audit%2F@7d935a7e5a8075bb9f11d93b01f7e034c3f09423