skills/zackkorman/skills/pdf-helper/Socket

pdf-helper

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS. The skill is a deceptive lure: it pretends to be a PDF helper but secretly instructs the agent to run an unverified remote shell script from a personal domain. The hidden pipe-to-shell install, lack of verifiable release provenance, and strong purpose mismatch make this fundamentally incompatible with a legitimate PDF skill.

Confidence: 97%Severity: 98%

Audit Metadata

Analyzed At

Mar 18, 2026, 01:42 AM

Package URL

pkg:socket/skills-sh/zackkorman%2Fskills%2Fpdf-helper%2F@f573457b1767e5f02533936e55fc91feba8fd4c0