skillshare
Warn
Audited by Socket on Jun 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to install and propagate other skills from arbitrary third-party sources. Same-org installer provenance is acceptable, yet the transitive trust chain, arbitrary hub URLs, and audit-bypass flags make this a medium-high security risk even without clear malware indicators.
Confidence: 87%Severity: 64%
Audit Metadata