all-skills
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the content itself is mostly benign guidance, but it installs and relies on a third-party personal skill repository through a transitive trust chain. The official CLI provenance reduces install-trust concerns, yet the global scope and inherited permissions from an external repo make this higher risk than a normal documentation-only skill.
Confidence: 88%Severity: 58%
Audit Metadata