fable-anti-slop-engineering
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose and requested capabilities are mostly coherent and the flagged TLS/curl patterns are documentation-only, not malicious behavior. However, the skill materially depends on external Fable CLI/skill components whose provenance is only weakly verifiable through a personal GitHub publisher and vercel.app docs, plus it delegates to another skill/tool (`fable-recover`), so install trust and transitive trust are disproportionate enough to classify as suspicious rather than benign.
Confidence: 87%Severity: 72%
Audit Metadata