tentacle-skills-washing

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The tentacle-skills-washing skill is coherently aligned with its stated purpose of adapting downloaded skills to the vault environment. It avoids external data flows, credentials, or dangerous install patterns. Its footprint remains within vault-controlled directories, focusing on file rewrites, path normalization, and metadata/document alignment. Overall risk is low to moderate, with no evident credential exposure or network exfiltration risks.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 01:20 PM
Package URL
pkg:socket/skills-sh/tentacle-pro%2Fskills%2Ftentacle-skills-washing%2F@2e9dc405e280b70fac391b51d470ee73dc693be5