technical-writing
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main writing guidance is benign and coherent, but the companion-skill discovery and install behavior is out of scope for a technical-writing skill. The biggest issue is transitive installation of third-party skills via `npx skills add`, which expands trust and agent capability beyond the claimed purpose even though there is no direct credential theft or exfiltration here.
Confidence: 85%Severity: 62%
Audit Metadata