Swagger Codegen Orchestrator
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent and there is no evidence of credential theft or unrelated capabilities, but the skill mainly instructs transitive installation through external CLIs. The `npx skills add` path is unpinned and relies on a third-party-maintained installer, making this a medium supply-chain and trust-chain risk rather than benign documentation.
Confidence: 90%Severity: 61%
Audit Metadata