awiki-msg
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The messaging purpose and documented commands are internally coherent, and the skill asks for confirmation before state-changing actions. However, it relies on a required but unverifiable external `awiki-cli` binary and grants broad wildcard CLI execution without showing an official distribution or provenance path. This is a high supply-chain risk, not confirmed malware.
Confidence: 83%Severity: 82%
Audit Metadata