course-certification-pipeline
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s main risk is not hidden exfiltration but disproportionate autonomous action. It is coherent with its stated purpose, uses mostly official endpoints, and does not obviously harvest credentials; however, it automates quiz completion and public LinkedIn publishing, includes known quiz answers, and references an unverifiable local helper script, making it unsafe for routine agent use.
Confidence: 87%Severity: 76%
Audit Metadata