project-docs-management
Warn
Audited by Socket on Sep 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the documented purpose is coherent for documentation management, but the skill's core dependency is an unverifiable `cabbage` CLI with no trustworthy install or publisher information. There is no clear credential theft or exfiltration in the text, yet trusting an opaque required binary to inspect and modify repo state makes the skill high risk.
Confidence: 84%Severity: 81%
Audit Metadata