relatr-elo-plugin-author

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose and capabilities are mostly coherent for a plugin-authoring guide, and it does not request secrets or show exfiltration behavior. The main issue is trust: it requires/usefully depends on an unverifiable `relo` CLI with no confirmed official install path or release provenance in the provided evidence, which raises supply-chain risk; publication guidance adds moderate real-world-action risk.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Apr 6, 2026, 09:28 PM
Package URL
pkg:socket/skills-sh/contextvm%2Frelatr%2Frelatr-elo-plugin-author%2F@e151ee1ee1928ef03adfec3ce1006e4751ef45ea