ESLint Config Enforcer
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated ESLint-focused purpose is plausible, but the actual installation path relies on a third-party skill registry and a publisher/source mismatch (`agentskillexchange/skills` vs `eslint/eslint`). The main risk is transitive install trust and weak provenance, not confirmed malicious behavior.
Confidence: 87%Severity: 74%
Audit Metadata