skills/vltansky/skills/rfc-research/Socket

rfc-research

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill depends on an externally published MCP server installed via unpinned npx and processes untrusted GitHub content with agent/subagent execution plus file-write capability. The main concern is indirect prompt injection and third-party tool trust, not confirmed malicious intent.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Mar 13, 2026, 08:04 AM

Package URL

pkg:socket/skills-sh/vltansky%2Fskills%2Frfc-research%2F@7fd0b4e38eea9aeef6a31f88eeb1cc5a565d3401