elide-case
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s legal-editing purpose matches its retrieval and checking workflow, and its external data flows largely target expected legal sources. The main concern is install/execution trust: it uses load-time pre-execution and local unpublished helper CLIs/scripts from PATH and ~/.claude directories, which are not independently verifiable and execute before normal oversight. That makes the skill riskier than a normal documentation workflow, but I do not see clear credential theft, exfiltration, or incompatible malicious behavior in the provided content.
Confidence: 87%Severity: 72%
Audit Metadata