alex Inclusive Writing Linter
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is benign and consistent with the upstream alex linter, but the actual install path relies on third-party skill registries and transitive skill installation instead of the upstream `get-alex` distribution. With no credential requests or exfiltration behavior, this is not malware-like, but it carries moderate supply-chain and trust-chain risk.
Confidence: 88%Severity: 56%
Audit Metadata