zip-unzip-file-compression-10mb
Warn
Audited by Socket on Jun 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core compression/decompression purpose matches the capability, but the skill is a remote-processing wrapper that uploads user file contents to AgentPMT storage and requires transitive setup-skill installation. Data flow is coherent with the stated product, yet remote storage, signed-URL exposure, and unverified same-org skill provenance make it medium risk rather than benign.
Confidence: 84%Severity: 56%
Audit Metadata