lexis
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose is narrow and mostly consistent, but it contains load-time pre-execution of a local `skill-toc` binary from a user plugin path that could not be verified as an official Claude Code component. There is no clear credential theft, exfiltration, or harmful Lexis behavior, but the pre-execution plus unverifiable local binary makes the skill higher risk than a normal documentation stub.
Confidence: 90%Severity: 72%
Audit Metadata