use-404-directory
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is coherent, and the skill avoids local installs and credential harvesting, but it routes user tasks through an unverified third-party MCP service and supports transitive invocation of third-party tools. Risk comes from intermediary data flow and trust chaining, not confirmed malware.
Confidence: 86%Severity: 68%
Audit Metadata