consulting-export
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose matches its file access and export behavior, but its real footprint depends heavily on transitive plugins, including at least one community-maintained renderer with weaker provenance and external network capability. The skill itself is not overtly malicious, yet forwarding large volumes of potentially sensitive consulting content into third-party plugin chains creates meaningful supply-chain and data-flow risk.
Confidence: 84%Severity: 64%
Audit Metadata