consulting-export

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose matches its file access and export behavior, but its real footprint depends heavily on transitive plugins, including at least one community-maintained renderer with weaker provenance and external network capability. The skill itself is not overtly malicious, yet forwarding large volumes of potentially sensitive consulting content into third-party plugin chains creates meaningful supply-chain and data-flow risk.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
May 19, 2026, 04:45 PM
Package URL
pkg:socket/skills-sh/cogni-work%2Finsight-wave%2Fconsulting-export%2F@2f5994362c5e3b0de3e8f052b046caa223f9c7d7
Security Audit — socket — consulting-export