technical-blog-writing

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is mostly coherent for technical writing, but the skill unnecessarily centers on installing external skill/CLI components, including a mismatched `belt-sh/cli` target and additional transitive skill installs. Data flows to remote inference services are expected for the vendor workflow, yet the install trust and transitive dependency chain are broader than necessary for a blog-writing guide.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:53 PM
Package URL
pkg:socket/skills-sh/bankai-skills%2Fsuperpowers%2Ftechnical-blog-writing%2F@17319b6e3ff52f0d587ad3a3aa771319f301c38e39e8206b02a875bee88bca30
Security Audit — socket — technical-blog-writing