skill-improve
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's main workflow is coherent for improving local skills, and there is no evidence of exfiltration, credential harvesting, or external download behavior. However, the load-time pre-execution shell command is a significant trust risk because it runs a local script before oversight; without the referenced script content, the skill's true execution footprint cannot be fully verified.
Confidence: 88%Severity: 58%
Audit Metadata