ai-cutting-costs
Warn
Audited by Socket on May 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The main content is benign cost-optimization documentation, but the embedded instructions to install additional skills from a third-party personal repo are disproportionate to the stated purpose and create a transitive supply-chain risk. No direct credential harvesting or exfiltration is present, but the skill should not be treated as purely benign because it expands trust to unverified external skills.
Confidence: 91%Severity: 62%
Audit Metadata