islandiguana

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and local file access are coherent for Obsidian search/edit workflows, and there is no clear exfiltration path. However, its core capability depends on an unverifiable local binary with no documented provenance, which makes the install/execution trust disproportionately risky for a skill definition.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Sep 16, 2026, 03:03 AM
Package URL
pkg:socket/skills-sh/gkwa%2Fvolcanicviper%2Fislandiguana%2F@ada8b0c7632e915c2fe7539102db907930a4c3582fc0408d1668ca9bd9c80a48