lfg

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is autonomous engineering, and its actual footprint matches that, but it is high risk because it forces uninterrupted multi-command execution, may act on untrusted browser content, and extends trust to other undeclared skills/commands. No direct malware or exfiltration is shown in this fragment, but the autonomy and transitive-command design are disproportionate for safe agent operation.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Mar 14, 2026, 07:07 AM
Package URL
pkg:socket/skills-sh/udecode%2Fplate%2Flfg%2F@f9eef0727f7ee69ce96dbc87ee33ea6db1ef6959