project-docs-management

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the documented purpose is coherent for documentation management, but the skill's core dependency is an unverifiable `cabbage` CLI with no trustworthy install or publisher information. There is no clear credential theft or exfiltration in the text, yet trusting an opaque required binary to inspect and modify repo state makes the skill high risk.

Confidence: 84%Severity: 81%
Audit Metadata
Analyzed At
Sep 1, 2026, 06:44 PM
Package URL
pkg:socket/skills-sh/devcxl%2Fcabbage%2Fproject-docs-management%2F@3e86f42b98de0f4dafb1cfca02683a9c43cede73
Security Audit — socket — project-docs-management