import-skill
Warn
Audited by Socket on Jul 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, but it is inherently high-risk because it vendors untrusted third-party skills into a trusted local catalog and registers them for later use. The main concern is transitive skill installation plus broad import of executable/instructional content, not confirmed malware.
Confidence: 91%Severity: 82%
Audit Metadata