skills/sales-skills/sales/sales-firsto/Socket

sales-firsto

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's main advisory content is benign and proportionate, but it contains a transitive skill-install instruction. The installer appears to be the official Skills CLI, reducing malware concern, yet the referenced target skill source was not independently verified and the unpinned `npx` execution adds supply-chain risk.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Apr 9, 2026, 10:13 AM

Package URL

pkg:socket/skills-sh/sales-skills%2Fsales%2Fsales-firsto%2F@7930926de86a76934a0d60036206f3e79aa40c71