stably-sdk-setup

Fail

Audited by Socket on Mar 1, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill content is well-aligned with its purpose as an autonomous setup assistant for the Stably Playwright SDK, with stepwise automation and safeguards for critical actions. It uses legitimate channels and clearly separates credential guidance from secret handling. The data flows are appropriate for a setup tool, and there is no evident malicious exfiltration. However, the heavy automation without per-action confirmations creates a non-trivial risk in edge cases; treat as Suspicious-to-Moderate until validated in a controlled environment and ensure explicit user prompts are enforced for high-impact steps.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 1, 2026, 07:58 AM
Package URL
pkg:socket/skills-sh/stablyai%2Fagent-skills%2Fstably-sdk-setup%2F@1fb32cadfbc0c231bf99e25e982b7e49cfea3c69