setup-task-and-glossary-rendering
Warn
Audited by Socket on May 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core rendering-help purpose is benign, but the skill also pushes transitive installation of a third-party skill with wildcard permissions and optional all-skills installation. The installer path itself is official, so this is not confirmed malware, but the scope expansion and permission breadth are not proportionate to the stated purpose.
Confidence: 89%Severity: 72%
Audit Metadata