docgen-generate

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities broadly match document generation, but it routes sensitive uploaded PDFs and business data through a Railway-hosted API whose publisher and data governance are not verifiable from the evidence. No malware or credential theft is evident, yet the external data flow and weak service provenance make the skill medium risk.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:40 PM
Package URL
pkg:socket/skills-sh/fikriaf%2Fdocgen%2Fdocgen-generate%2F@e8a16c98129b8c29390218e2c33b431254e1c828
Security Audit — socket — docgen-generate