edge-find-skills
Warn
Audited by Socket on Oct 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose matches the capability, but the skill’s main function is to load third-party skills into the agent, creating a transitive trust chain. Install/data flows are mostly disclosed and same-brand, so this is not confirmed malicious; however, loading public external instructions on demand is a medium-high security risk even without local installation.
Confidence: 89%Severity: 72%
Audit Metadata