generate-docs-from-source

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core documentation-generation behavior is coherent and mostly well-scoped, but the unreviewed transitive skill `$docspress-install` creates a meaningful trust gap. Without that dependency, this would lean benign; with it, overall risk is medium due to transitive installation trust and local execution of repository scripts.

Confidence: 84%Severity: 54%
Audit Metadata
Analyzed At
Aug 3, 2026, 06:18 PM
Package URL
pkg:socket/skills-sh/Automattic%2Fdocspress%2Fgenerate-docs-from-source%2F@12b3553cf042a4d64b071d995c5312091c9e2dfcc20ca9ff35fa842e8e91e232
Security Audit — socket — generate-docs-from-source