playbook-technical-writing-docs-overhaul

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is benign technical writing guidance, but it unnecessarily expands trust by instructing installation of three additional skills from a personal GitHub repo. Data flow stays within the documented Skills/npm/GitHub ecosystem and there is no evidence of credential theft or malware, but the transitive trust chain and unpinned external skill loading make the overall risk medium.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Sep 26, 2026, 12:20 PM
Package URL
pkg:socket/skills-sh/aniruddhaadak80%2Fskills%2Fplaybook-technical-writing-docs-overhaul%2F@382b4f1acbb5c241a4a8a14498c1180350ed93d2cd5010a5b4d1dcba68b4c063