skills/jeremylongshore/tons-of-skills-marketplace/code-documentation-analyzer/Socket

code-documentation-analyzer

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill does not show overt malware, downloads, or credential routing, but its actual footprint is weakly defined and over-permissioned: a generic documentation skill should not need unrestricted Bash access. Main risk is capability creep and arbitrary command execution rather than confirmed malicious behavior.

Confidence: 90%Severity: 56%

Audit Metadata

Analyzed At

Aug 28, 2026, 05:49 AM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fcode-documentation-analyzer%2F@7fe13274a8037c4a87fe778b363449a9ecf7f7df8096d46f8e07062d8c3b3951