knowledge-work

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose and read-only capabilities are benign, but the installation path is inconsistent with Anthropic's official documentation and introduces third-party transitive trust. No clear malware or credential theft is visible in the provided snippet, yet the repackaging/install mismatch makes it riskier than a direct same-org install.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 08:51 AM
Package URL
pkg:socket/skills-sh/charlieviettq%2Fawesome-agent-skill%2Fknowledge-work%2F@fb5129b4b195b3308e2c70b75ed533968dc51ee89f43ee99dc92aeaacedea531
Security Audit — socket — knowledge-work