skillify
Warn
Audited by Socket on Jul 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core purpose is coherent, but ADAPT mode expands trust to arbitrary external skills and registries, and it processes untrusted skill text while retaining write/exec capability. Main concerns are supply-chain variability, indirect prompt injection from imported skills, and moderate transitive trust; there is no clear evidence of credential theft or overt malware.
Confidence: 85%Severity: 68%
Audit Metadata