skill-scout
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose matches its capabilities, but it is a meta-installer/procurement skill that triggers transitive skill installation and depends on an external CLI with only partially verified provenance in the supplied evidence. Main risk is supply-chain and inherited trust from recommended plugins/skills, not clear malicious intent or direct credential theft.
Confidence: 84%Severity: 72%
Audit Metadata