weekly-digest

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose and local file-writing behavior are mostly consistent with a digest-generation skill, but risk is elevated by two factors: broad ingestion of untrusted web content while retaining write capability, and a transitive dependency on another skill installed from a personal GitHub repository. I found no strong evidence of malware, credential theft, or covert exfiltration.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 12, 2026, 10:21 PM
Package URL
pkg:socket/skills-sh/glebis%2Fclaude-skills%2Fweekly-digest%2F@5b6e86b5e7082e07a3bd14f043d5c97f81ee8767b8748e459473fad9a9a1c3aa
Security Audit — socket — weekly-digest