law-to-markdown

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core behavior mostly matches the stated legal-document conversion purpose, but PDF/DOCX support relies on transitive installation of another skill and may route sensitive documents to a cloud OCR service. Provenance is same-publisher and official MinerU endpoints are referenced, so this is not clearly malicious; the main concerns are transitive trust and external document transfer.

Confidence: 85%Severity: 55%
Audit Metadata
Analyzed At
Oct 26, 2026, 10:52 AM
Package URL
pkg:socket/skills-sh/anbeime%2Fskill%2Flaw-to-markdown%2F@ab55ad4ed68e987127d7987333bf6bd218faaf5f