content-brief
Warn
Audited by Socket on Jul 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the skill’s actual footprint depends on an unverifiable local CLI and forwards an API key to it without any provenance or endpoint transparency. File writing is proportionate, but install/execution trust and hidden data flows make this a high-risk skill rather than a benign documentation wrapper.
Confidence: 84%Severity: 84%
Audit Metadata