skills/cristiano-pacheco/ai-tools/ai-setup/Socket

ai-setup

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core local Obsidian setup steps are broadly aligned with the stated purpose, but the skill expands trust by directing installation of a third-party GitHub skill suite and by configuring git push for the user's vault. The main concerns are transitive skill installation and publishing local vault contents to a remote repo, not hidden malware behavior.

Confidence: 85%Severity: 69%

Audit Metadata

Analyzed At

Jul 7, 2026, 02:46 PM

Package URL

pkg:socket/skills-sh/cristiano-pacheco%2Fai-tools%2Fai-setup%2F@1e1fb5df74993f8567b82edd48c6b724b99c7534d69711ac307c54d7cb5f7642