document-generation
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Purpose and capabilities are mostly aligned for document generation, and the skill explicitly avoids fabrication and ticket/device writes. However, its core function depends on an unspecified executable launched from DOCUMENT_MCP_CMD with no verifiable provenance or install guidance, so this is best classified as suspicious due to supply-chain trust rather than confirmed malware.
Confidence: 86%Severity: 82%
Audit Metadata