estimate-all
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and behavior are mostly coherent and read-only, but it depends on an ambiguously named external `lc` CLI with unclear provenance from the skill text. No malicious data flow is evident, yet the undocumented third-party tool dependency raises medium supply-chain risk.
Confidence: 87%Severity: 56%
Audit Metadata