business-growth-skills
Warn
Audited by Socket on Sep 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated business-analysis purpose is coherent and the local stdlib-only Python tooling appears proportionate, but the install path introduces a medium trust risk: a third-party CLI installs skill content from a personal GitHub repository, creating a transitive trust chain without strong provenance guarantees. No direct credential theft, exfiltration, or malware behavior is evident in the provided snippet.
Confidence: 88%Severity: 57%
Audit Metadata