lexis

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose is narrow and mostly consistent, but it contains load-time pre-execution of a local `skill-toc` binary from a user plugin path that could not be verified as an official Claude Code component. There is no clear credential theft, exfiltration, or harmful Lexis behavior, but the pre-execution plus unverifiable local binary makes the skill higher risk than a normal documentation stub.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Flexis%2F@a6c5eb5d105cb68620d2b3d019e9c0484e9a55c879c031ce592f213f576dd8b4