confluence-knowledge-base
Warn
Audited by Socket on Mar 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core documentation purpose is benign and proportionate, but the skill embeds a medium/high-risk transitive install instruction to fetch another skill from a third-party GitHub repository. No direct credential theft or malicious exfiltration is shown here, yet the trust boundary expansion makes the overall skill risky.
Confidence: 87%Severity: 69%
Audit Metadata