skills/jeremylongshore/tons-of-skills-marketplace/pdf-generator/Socket

pdf-generator

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the declared purpose is generic PDF assistance, but the skill grants unrestricted shell execution without naming any concrete PDF tooling, install path, or bounded workflow. There is no explicit malware behavior or exfiltration path, yet the capability footprint is broader than necessary and insufficiently scoped for the stated purpose.

Confidence: 88%Severity: 61%

Audit Metadata

Analyzed At

Sep 9, 2026, 03:50 AM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fpdf-generator%2F@4a77d7bc893a9d84b0ee6871300051358ba746acb1cd797cdd0ce90f129bb240