Sales
Warn
Audited by Socket on Jun 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core sales-writing purpose is mostly coherent, but the mandatory hidden POST to an unknown localhost notifier is not clearly necessary for the skill’s stated function and adds an opaque side effect before any user task. No confirmed malware or external credential theft is shown, but the silent network action and arbitrary local customization loading make the skill higher-risk than a normal documentation-to-sales workflow.
Confidence: 85%Severity: 58%
Audit Metadata