ip

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-consistent for IP lookup and diagnostics, but it also grants AI-driven host discovery and port-scanning capabilities, which makes it high risk as a security/exploit-style skill. Install provenance for `x-cmd` appears same-org and publicly documented, so supply-chain concern is moderate rather than malicious; the main risk is enabling active network scanning and undisclosed external lookup backends.

Confidence: 86%Severity: 76%
Audit Metadata
Analyzed At
Apr 10, 2026, 05:42 AM
Package URL
pkg:socket/skills-sh/x-cmd%2Fskill%2Fip%2F@e77aaf1b660499ee68d43b701cb515cf476cd871