lovstudio-event-poster
Warn
Audited by Socket on Jul 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated poster-design purpose does not match the visible implementation, which is mainly an encrypted loader that executes hidden instructions obtained through external tooling and network validation. The opaque instruction set, transient third-party CLI execution, and transitive skill installation make the skill high-risk even without proof of overt malware.
Confidence: 87%Severity: 78%
Audit Metadata