generate-docs-from-source
Warn
Audited by Socket on Aug 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core documentation-generation behavior is coherent and mostly well-scoped, but the unreviewed transitive skill `$docspress-install` creates a meaningful trust gap. Without that dependency, this would lean benign; with it, overall risk is medium due to transitive installation trust and local execution of repository scripts.
Confidence: 84%Severity: 54%
Audit Metadata