playbook-cybersecurity-appsec-baseline
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is purpose-aligned as an AppSec playbook, but it mainly functions as a launcher for three external skills. Because it creates a transitive trust chain to unpinned content from a personal GitHub repo via the skills CLI, the main concern is medium supply-chain/trust expansion rather than confirmed malware or credential theft.
Confidence: 90%Severity: 58%
Audit Metadata