community-management
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core community-management content is benign and proportionate, but the skill includes a transitive skill installation workflow and an unverifiable publisher reference for companion installs. Risk comes from supply-chain and inherited-permissions trust, not from credential theft or overt exfiltration.
Confidence: 88%Severity: 64%
Audit Metadata