grill-me
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated behavior is benign and narrowly scoped, but its install path asks the agent/user to trust an external skill fetched from an unverified third-party GitHub repo through a transitive CLI chain. No credential theft or malicious execution is shown, yet the unpinned remote install makes this a medium-risk trust/supply-chain issue.
Confidence: 87%Severity: 56%
Audit Metadata