tesla

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
tesla-engineer/SKILL.md

SUSPICIOUS. The skill’s content is mostly benign documentation/persona material with no credential harvesting or exfiltration, but it includes a transitive remote skill install from an unpinned GitHub Raw URL. Risk is driven by install trust and inherited agent permissions, not by the Tesla-themed content itself.

Confidence: 91%Severity: 53%
Audit Metadata
Analyzed At
Mar 31, 2026, 06:25 AM
Package URL
pkg:socket/skills-sh/theneoai%2Fawesome-skills%2Ftesla%2F@d8ec8e489246c267a0c5a6148a1643e6d5f45fc8