skill-gen

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly coherent with its stated purpose, but it transforms untrusted external documentation into locally stored skills that may later influence agent behavior. Firecrawl usage appears same-org and officially documented, so supply-chain risk is moderate-low; the main concern is indirect prompt injection and transitive trust from generated skills, especially with global output.

Confidence: 87%Severity: 57%
Audit Metadata
Analyzed At
Sep 29, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/crafter-station%2Fskills%2Fskill-gen%2F@f32bc591cb5dc15ec7ad165e6c7a0d04fb9078a162e9596b04892ac253bd0c77