skills/tool-belt/skills/ai-rag-pipeline/Socket

ai-rag-pipeline

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s main behavior matches its stated RAG purpose, and the infsh installer appears to be same-org official. Risk comes from unpinned curl|sh installation, broad Bash access, processing untrusted web content with action capability, and explicit transitive installation of other skills.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Apr 9, 2026, 08:03 AM

Package URL

pkg:socket/skills-sh/tool-belt%2Fskills%2Fai-rag-pipeline%2F@3be4496ccafb71335ce5010e43f93ae314c9d5da