lovstudio-write-professional-book
Warn
Audited by Socket on Jul 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is plausible, but the skill’s actual instructions are concealed behind a remote decryption step and may trigger transitive installation of additional skill content. Same-brand install evidence lowers the chance of outright malware, yet the hidden runtime prompt, repeated network dependency, and third-party CLI trust gap make the skill materially risky.
Confidence: 84%Severity: 78%
Audit Metadata