learning-notes-automation

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The overall purpose is coherent for a learning-notes skill, but its actual footprint relies on several unverifiable local scripts and forwards an API key into an unprovided script that makes external calls. The main concern is install/execution trust and credential forwarding, not obvious malicious intent.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Sep 25, 2026, 01:49 AM
Package URL
pkg:socket/skills-sh/chubbyguan%2Fchubbyskills%2Flearning-notes-automation%2F@31c579f6c5cff1f9382c50b4c7fedc88bfdd7ea7af2a933924abae87c5d34f96