skill-gen
Warn
Audited by Socket on Sep 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly coherent with its stated purpose, but it transforms untrusted external documentation into locally stored skills that may later influence agent behavior. Firecrawl usage appears same-org and officially documented, so supply-chain risk is moderate-low; the main concern is indirect prompt injection and transitive trust from generated skills, especially with global output.
Confidence: 87%Severity: 57%
Audit Metadata