confluence-knowledge-base

Warn

Audited by Socket on Mar 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core documentation purpose is benign and proportionate, but the skill embeds a medium/high-risk transitive install instruction to fetch another skill from a third-party GitHub repository. No direct credential theft or malicious exfiltration is shown here, yet the trust boundary expansion makes the overall skill risky.

Confidence: 87%Severity: 69%
Audit Metadata
Analyzed At
Mar 26, 2026, 03:43 AM
Package URL
pkg:socket/skills-sh/bondansebastian%2Fagent-skills%2Fconfluence-knowledge-base%2F@82ae778973e9c992ed1dc6bebe028fc903ab05cf