jev-diagnostic-advice
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent and its consent/disclosure language is largely protective, but it relies on an unverified external MCP server and allows routing data to a non-official 'compatible endpoint.' That combination makes the footprint higher risk than a normal documentation-only advisory skill, mainly due to install/provenance and remote data-flow uncertainty rather than confirmed malicious intent.
Confidence: 84%Severity: 79%
Audit Metadata