zhihu-writer

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is mostly benign writing guidance, but it contains an unnecessary transitive skill-install recommendation to an unverified external source. There is no direct credential theft, exfiltration, or execution behavior here, yet the install prompt is out of scope for a Zhihu writing assistant and raises medium risk.

Confidence: 90%Severity: 52%
Audit Metadata
Analyzed At
Oct 16, 2026, 09:51 PM
Package URL
pkg:socket/skills-sh/kevinaimonster%2Fskill-hub%2Fzhihu-writer%2F@99a6bc3be7ee87b80fef9f0a79efcb7567f2afe4f3e782c9dd347e7b208f6f80