to-android-integrate
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The visible skill is mostly coherent for Android dependency integration and does not overreach for credentials or hidden actions, but its core behavior depends on an unseen local script that downloads and extracts artifacts from an unverified publisher relationship. That unverifiable acquisition path is disproportionate enough to classify the skill as suspicious rather than benign.
Confidence: 84%Severity: 72%
Audit Metadata