Documents
Warn
Audited by Socket on Jun 27, 2026
3 alerts found:
Anomalyx2SecurityAnomalyPptx/SKILL.md
LOWAnomalyLOW
Pptx/SKILL.md
SUSPICIOUS. The PPTX workflows and official-tool installs are mostly coherent, but the mandatory read of ~/.claude/PAI/SKILL.md is unrelated and over-scoped for a presentation skill, exposing personal context and internal operating data without clear need.
Confidence: 100%Severity: 60%
AnomalyPdf/SKILL.md
LOWAnomalyLOW
Pdf/SKILL.md
SUSPICIOUS: the PDF functionality itself is benign and uses standard local tools, but the mandatory preload of ~/.claude/PAI/SKILL.md is not proportionate to PDF processing and exposes unrelated personal/operational context to the agent. Install trust is low-risk; the main concern is overbroad local context access and transitive instruction loading.
Confidence: 87%Severity: 56%
SecurityXlsx/SKILL.md
MEDIUMSecurityMEDIUM
Xlsx/SKILL.md
Audit Metadata