still-reading

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: The skill's core function is coherent, but its install and data-publishing model raise material trust concerns. The main issues are an unverified `curl|bash` installer, transitive skill installation, and a workflow that pushes user content to public hosts and a third-party reader domain. This looks more like a risky/unverified distribution pattern than confirmed malware.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:53 PM
Package URL
pkg:socket/skills-sh/megabyte0x%2Fstillreading%2Fstill-reading%2F@abf045f9bc01d9996ed975231aa2c0907b6f7c87