zig

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The Zig skill fragment is coherent with its stated purpose of guiding Zig development, fuzzing, and build/test workflows. It does not itself read or exfiltrate credentials, nor does it instruct unsafe remote execution. A potential supply-chain risk exists if users adopt the Zon example dependency pattern without proper pinning. Overall, the content is benign, with medium caution around dependency sourcing in real-world usage.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 11:46 AM
Package URL
pkg:socket/skills-sh/tkersey%2Fdotfiles%2Fzig%2F@df943910316a6676c52c668d16cc025d4686432a