Skills
skills/purrgrammer/grimoire/applesauce-core/Socket

applesauce-core

Fail

Audited by Socket on Feb 17, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Installation of third-party script detected All findings: [CRITICAL] command_injection: Installation of third-party script detected (SC006) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] BENIGN: The documentation artifact purposefully teaches usage patterns for applesauce-core v5. No malicious activity, credential handling, or covert data flows detected within the fragment.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 17, 2026, 08:07 AM
Package URL
pkg:socket/skills-sh/purrgrammer%2Fgrimoire%2Fapplesauce-core%2F@c89bdedfa95b9918515ecc13a3b81b9f528ab4aa