legal-auto-signer
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent, but automatic legal signing is a high-risk autonomous action with real-world consequences. No malicious installer or clear exfiltration endpoint is shown, yet the lack of explicit per-action approval, auth constraints, and endpoint details makes the skill unsafe to trust as written.
Confidence: 86%Severity: 72%
Audit Metadata