data-visualization

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's main behavior is broadly consistent with data visualization, and the CLI appears to be an official same-org tool, so this is not fundamentally incompatible with its purpose. However, it still carries medium security risk from remote installer execution, remote processing of user code/data through hosted apps, broad `infsh` bash permissions, and especially the included transitive skill-install commands, which extend trust beyond the skill's stated scope.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
Apr 9, 2026, 08:03 AM
Package URL
pkg:socket/skills-sh/tool-belt%2Fskills%2Fdata-visualization%2F@708bc53b35f694c48dc35631cd10c3f87739086b