awiki-runtime
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s stated runtime-management purpose is plausible, but its trust model depends on an unverifiable awiki-cli binary with wildcard execution rights and partially undisclosed network behavior. I see no confirmed malicious payload or credential harvesting in this skill text, but the binary provenance gap alone makes the overall risk high.
Confidence: 86%Severity: 82%
Audit Metadata