ecosystem-api
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is mainly a dispatcher that installs other skills through an unseen local script and unspecified downstream sources. The main concern is transitive trust and unverifiable install behavior, not confirmed malware or direct credential theft in the provided file.
Confidence: 89%Severity: 74%
Audit Metadata