skills/legalquants/lq-skills/superdoc-redlines/Socket

superdoc-redlines

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated capabilities are well aligned with local DOCX redlining and no clear exfiltration or credential harvesting is present, but install provenance is weak: the evidenced package/skill distribution relies on a personal GitHub repo and mutable ZIP/registry paths rather than a clearly verifiable official release for `superdoc-redlines`. Risk is mainly supply-chain and transitive-install trust, not malicious document-processing behavior.

Confidence: 85%Severity: 64%

Audit Metadata

Analyzed At

Jul 8, 2026, 08:54 AM

Package URL

pkg:socket/skills-sh/LegalQuants%2Flq-skills%2Fsuperdoc-redlines%2F@1044fe96b2d6075930b22ae475579dc978bd67abf1ae7ea9eeb3161a323b3aa6