newsletter-curation
Warn
Audited by Socket on Jul 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The editorial purpose is plausible, but the skill’s real footprint leans on transitive installation of another skill and routes work through a belt/inference.sh intermediary instead of direct, clearly scoped APIs. That makes the install trust and data-flow model broader than expected for a newsletter curation guide.
Confidence: 85%Severity: 74%
Audit Metadata