setup-task-and-glossary-rendering

Warn

Audited by Socket on May 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core rendering-help purpose is benign, but the skill also pushes transitive installation of a third-party skill with wildcard permissions and optional all-skills installation. The installer path itself is official, so this is not confirmed malware, but the scope expansion and permission breadth are not proportionate to the stated purpose.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
May 11, 2026, 05:56 PM
Package URL
pkg:socket/skills-sh/dpolivaev%2Fspec-loop%2Fsetup-task-and-glossary-rendering%2F@44c239a8c854157e5fe630c859719a4112edb6c5
Security Audit — socket — setup-task-and-glossary-rendering