prism
Warn
Audited by Socket on Jul 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's stated purpose is benign reasoning orchestration, but it requires transitive installation of a third-party skill bundle and asks for wildcard permissions that exceed what a pure analysis skill should need. The official `skills` CLI lowers installer-trust concern somewhat, yet the downstream repo and inherited broad permissions make the overall footprint medium-high risk.
Confidence: 86%Severity: 74%
Audit Metadata