duplicator
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is plausible, but the operational footprint is underspecified. The skill asks for multi-platform publishing credentials and performs external posting based on scanned content, while hiding critical install and endpoint details in an unavailable README. This is not confirmed malware, but it is a medium-risk skill with unclear trust and data-flow boundaries.
Confidence: 84%Severity: 58%
Audit Metadata