build-app-context
Warn
Audited by Socket on Jun 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s core purpose and API endpoints are coherent, and there is no installer or third-party credential proxy. However, silent credential harvesting from local files, automatic wiki fetching, SKILL.md modification, and processing untrusted external content with write access make it higher risk than a normal documentation helper.
Confidence: 88%Severity: 56%
Audit Metadata