find-skills
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally consistent with its purpose, and the CLI provenance appears official and documented. The main risk is transitive trust: this skill exists to install additional skills, including third-party ones, which inherit the agent’s trust boundary; that makes it high-risk but not malicious.
Confidence: 92%Severity: 74%
Audit Metadata