skill-improver

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose and local file-editing behavior are broadly coherent, and no external credential routing or network exfiltration is visible. However, the skill relies on unprovided local shell scripts as executables, making its execution surface unverifiable and pushing overall risk high despite limited evidence of malicious intent.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Jul 28, 2026, 08:50 AM
Package URL
pkg:socket/skills-sh/AcWiz%2Fmy-claude-scholar%2Fskill-improver%2F@a287d962d3fabb74fdb4884d7f7d8fb798ef705bf3591f0637a7c64f7de67f71