find-skills
Warn
Audited by Socket on Aug 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose matches the capability, and the core CLI appears official, but this skill’s main function is to discover and install additional skills from potentially unverified third-party sources. That creates a transitive trust chain and broadens the agent’s effective permissions, especially with global non-interactive installs.
Confidence: 85%Severity: 72%
Audit Metadata