technical-blog-writing

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is mostly coherent for technical writing, but the skill unnecessarily centers on installing external skill/CLI components, including a mismatched `belt-sh/cli` target and additional transitive skill installs. Data flows to remote inference services are expected for the vendor workflow, yet the install trust and transitive dependency chain are broader than necessary for a blog-writing guide.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Sep 8, 2026, 05:09 PM
Package URL
pkg:socket/skills-sh/its-a-skill-issue%2Fsuperpowers%2Ftechnical-blog-writing%2F@17319b6e3ff52f0d587ad3a3aa771319f301c38e39e8206b02a875bee88bca30
Security Audit — socket — technical-blog-writing