known-issue-research
Warn
Audited by Socket on Aug 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, but it expands trust through transitive skill installation and relies on untrusted external web content to drive decisions. No direct credential theft or malware behavior is present, yet the dependency/install model and research-based control flow create medium security risk.
Confidence: 88%Severity: 64%
Audit Metadata