computer-vision
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main computer-vision guidance is coherent and benign, but the companion-check block adds unrelated local enumeration and explicit transitive skill installation from an unverified third-party repo via unpinned `npx`. That makes the skill riskier than a normal documentation skill, though there is no clear credential theft or confirmed malicious payload.
Confidence: 88%Severity: 62%
Audit Metadata