make-literature-note

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose and file access are coherent for literature-note authoring, and there are no obvious exfiltration routes or credential grabs. The main issue is trust: it depends on an unidentified local `.slipbox/bin/slipbox` executable whose provenance and behavior are not verifiable from the skill, which forces a high security-risk classification even though malicious intent is not shown.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Sep 1, 2026, 02:36 AM
Package URL
pkg:socket/skills-sh/andarwaly%2Fslipbox%2Fmake-literature-note%2F@af443d140396ea65ab85a6c67984d4a056c24acd88143414315bf45a5140a163