technical-blog-writing
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is mostly coherent for technical writing, but the skill unnecessarily centers on installing external skill/CLI components, including a mismatched `belt-sh/cli` target and additional transitive skill installs. Data flows to remote inference services are expected for the vendor workflow, yet the install trust and transitive dependency chain are broader than necessary for a blog-writing guide.
Confidence: 89%Severity: 74%
Audit Metadata