extension-guide-v3

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The supplied fragment is a comprehensive documentation/guidance scaffold for Sindri V3 extensions. It is consistent with a descriptive, non-executable blueprint and does not contain code that would execute or exfiltrate data. No suspicious network activity, credential harvesting, or supply-chain exploit vectors are evident within the fragment itself. From a security-review perspective, it should be considered benign in isolation, though any future implementation should ensure proper secret handling (avoid hardcoding, use secure storage) and strict validation of extension manifests before execution.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 11:04 AM
Package URL
pkg:socket/skills-sh/pacphi%2Fsindri%2Fextension-guide-v3%2F@cbb2c8bf6cd23fe7f84efa2a68fadaa15ab15647