skills/nomadamas/k-skill/daiso-product-search/Socket

daiso-product-search

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is narrow and plausible, but the published skill does not contain its real logic and instead delegates primary behavior to a runtime-fetched external CLI/source. This is mainly a supply-chain and transitive-instruction trust issue, not confirmed malware.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Sep 17, 2026, 06:35 AM

Package URL

pkg:socket/skills-sh/nomadamas%2Fk-skill%2Fdaiso-product-search%2F@d5e377ab815897aba9f896fa918e355c99ac53589048e4b634bfa5147b8793eb