skills/sales-skills/sales/sales-third-party/Socket

sales-third-party

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose as a catalog is real, but its actual footprint is transitive installation of many unpinned third-party skills from mixed publishers. The official CLI lowers direct malware confidence, yet the trust expansion and lack of pinning/provenance checks make this a high supply-chain and transitive-installation risk.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Apr 4, 2026, 09:44 AM

Package URL

pkg:socket/skills-sh/sales-skills%2Fsales%2Fsales-third-party%2F@d35f1a748fb75a182bf552da4fc55797c2712134