encrytion-decryption-toolkit
Warn
Audited by Socket on Jul 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is purpose-aligned as a hosted crypto toolkit and uses same-org AgentPMT infrastructure, but its core design requires sending highly sensitive cryptographic material and private keys to a remote service. That data flow is disproportionate for encryption/signing tasks and creates meaningful confidentiality risk. Transitive installation of additional setup skills adds moderate trust-chain risk, but there is no strong evidence of outright malware or deceptive publisher mismatch.
Confidence: 89%Severity: 68%
Audit Metadata