screenshot
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The advertised capability is coherent with a screenshot skill and there is no evidence of credential theft or exfiltration, but the entry is only a launcher that instructs transitive installation of upstream skills from mutable GitHub content. Same-org provenance lowers concern, yet the indirect install path and unpinned upstream bundle make this higher risk than a self-contained benign documentation skill.
Confidence: 88%Severity: 56%
Audit Metadata