skills/trailofbits/skills/trailmark-structural/Socket

trailmark-structural

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS due to trust mismatch around the unverifiable `trailmark` binary, not because of clear malicious behavior. Purpose and local file access are proportionate to structural analysis, but the main executable's provenance is unresolved, so the skill carries high supply-chain risk despite limited data-exfiltration evidence.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Mar 31, 2026, 10:43 PM

Package URL

pkg:socket/skills-sh/trailofbits%2Fskills%2Ftrailmark-structural%2F@e989de2803f972939d2a3e98457cb20d94e4a0f9