performance
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the skill expands trust by telling the agent to install external skills through an unseen local installer. No direct malicious or exfiltration behavior is present here, yet the transitive installation path and partially unverifiable provenance make this a medium-risk skill rather than benign.
Confidence: 87%Severity: 66%
Audit Metadata