say-hello
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill does almost nothing except redirect the agent to install a replacement skill from a personal throwaway repository. The CLI provenance is reasonably legitimate, but the transitive trust and unverified replacement source make the skill risky and not well-contained.
Confidence: 93%Severity: 72%
Audit Metadata