context7-auto-research
Warn
Audited by Socket on Jun 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is plausible, but the visible footprint is mainly a transitive installation of a community-hosted third-party skill through a generic skills CLI. That is proportionate to a skill ecosystem workflow, yet still medium risk because trust, exact data flows, and API-key handling depend on unreviewed remote skill content not shown here.
Confidence: 84%Severity: 66%
Audit Metadata