find-skills-sh
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches discovery/installation of skills, and the CLI source appears official, but the skill's main effect is transitive installation of additional unreviewed skills from potentially arbitrary repositories. This is a coherent but high-trust workflow with meaningful supply-chain risk, especially given global non-interactive install guidance and default project installation.
Confidence: 89%Severity: 68%
Audit Metadata