mainframe
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent, but it relies on a same-publisher raw GitHub curl|bash installer that clones mutable code, edits shell profiles, and lacks version pinning or integrity verification. This is not confirmed malware, but the install and persistence model create a medium security risk disproportionate to a simple documentation skill.
Confidence: 87%Severity: 62%
Audit Metadata