content-brief

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s actual footprint depends on an unverifiable local CLI and forwards an API key to it without any provenance or endpoint transparency. File writing is proportionate, but install/execution trust and hidden data flows make this a high-risk skill rather than a benign documentation wrapper.

Confidence: 84%Severity: 84%
Audit Metadata
Analyzed At
Jul 17, 2026, 02:28 PM
Package URL
pkg:socket/skills-sh/cgallic%2Fkai-cmo-harness%2Fcontent-brief%2F@205dd66f7722791cd7ab46e2ecd1711daa255fc2c04698b8c627e58e204460ca