gitnexus-explorer

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s main behavior matches its purpose, but its footprint includes multiple unpinned install/execute steps and an optional public tunnel that exposes repository intelligence to external users. This looks like a real developer workflow with meaningful supply-chain and data-exposure risk, not confirmed malware.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Apr 15, 2026, 05:06 AM
Package URL
pkg:socket/skills-sh/NousResearch%2Fhermes-agent%2Fgitnexus-explorer%2F@719b5f1f359fd05c563f5a2bff2db6d1fc6c7859