lit-pm

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose is coherent with its orchestration behavior, local file use, and specialist delegation, so it does not look malicious. However, it materially expands trust through multiple transitive skill dependencies and processes substantial untrusted external content with write/delegation capability, making it a moderate-risk orchestration skill rather than a benign single-purpose local helper.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Mar 20, 2026, 01:20 PM
Package URL
pkg:socket/skills-sh/dangeles%2Fclaude%2Flit-pm%2F@9d6e6d9906367e5c8aa8a1a679b6a9160f855a40
Security Audit — socket — lit-pm