reproducibility-computational-reproducibility
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS due to transitive trust, not because of the reproducibility guidance itself. The skill’s stated purpose is benign and its capabilities are minimal, but it asks the agent to install third-party skill content from an unpinned personal GitHub repo through the Skills ecosystem, which meaningfully increases supply-chain and instruction-trust risk.
Confidence: 91%Severity: 58%
Audit Metadata