vim-neovim
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. Most content is benign Neovim documentation and official ecosystem setup, but the companion check is disproportionate: it scans local agent skill directories and promotes transitive installation of unrelated third-party skills. No clear credential theft or malicious exfiltration is present, yet the trust expansion beyond Neovim support raises meaningful security risk.
Confidence: 88%Severity: 63%
Audit Metadata