planning-content

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose and most capabilities are coherent for a content-planning skill, and there is no clear credential theft or malicious exfiltration path. However, the skill requires executing custom local `wa-*` scripts and setup wrappers with no verifiable public provenance; that unverifiable execution footprint is disproportionate enough to raise supply-chain risk above benign.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Sep 30, 2026, 03:24 AM
Package URL
pkg:socket/skills-sh/hoangvantuan%2Fclaude-plugin%2Fplanning-content%2F@0cc732188624806cccc8314c7592d75fd100833590ab94242e197415093193a3