data-context
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is benign documentation/interview workflow, but the skill includes unnecessary load-time shell execution of an unverified local helper binary and encourages installation of an additional plugin. There is no evidence of credential theft or network exfiltration in this snippet, so this is not confirmed malware; however, the pre-execution mechanism plus unverifiable dependency makes the skill high risk and disproportionate to its purpose.
Confidence: 93%Severity: 84%
Audit Metadata