docs-systems-docs-as-code-workflow
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated purpose is benign documentation workflow guidance, but it also tells the agent to install a third-party skill, which introduces transitive trust not necessary to explain the workflow itself. Because the `skills` CLI appears official, this is not strong evidence of malware; the main issue is medium security risk from delegating trust to an external skill source with limited publisher verification.
Confidence: 89%Severity: 58%
Audit Metadata