algal-writing

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent for a writing-audit skill, and requested access is narrow, but the skill outsources its main behavior to an unpinned external CLI via `bunx`. With no verified publisher/install provenance or clear Jev data-flow details, this is a medium supply-chain trust risk rather than confirmed malicious behavior.

Confidence: 80%Severity: 56%
Audit Metadata
Analyzed At
Sep 19, 2026, 06:58 AM
Package URL
pkg:socket/skills-sh/0thernet%2Falgal-skills%2Falgal-writing%2F@01b3a59d7b1236d9427d33480595175045dd3b3225c57dce479db98dfdb2c296