still-reading
Fail
Audited by Socket on Mar 18, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS: The skill's core function is coherent, but its install and data-publishing model raise material trust concerns. The main issues are an unverified `curl|bash` installer, transitive skill installation, and a workflow that pushes user content to public hosts and a third-party reader domain. This looks more like a risky/unverified distribution pattern than confirmed malware.
Confidence: 87%Severity: 74%
Audit Metadata