skill-finder

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill-finder's footprint is coherent with its stated purpose: it searches public sources, reads SKILL.md content for evaluation, and provides quality and fitness assessments to guide user choice. No credential access, unverifiable binaries, or outbound data exfiltration appears to be involved. The data flows are appropriate for a discovery-and-evaluate workflow, and the use of public GitHub content minimizes risk. Overall, the risk profile is low to moderate and aligns with a benign, utility-focused tool for recommending Claude skills.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:18 AM
Package URL
pkg:socket/skills-sh/tenequm%2Fskills%2Fskill-finder%2F@0474ab8863b71da1fc07c7ada054f19663373a81