homework
Warn
Audited by Socket on Oct 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The homework workflow is broadly aligned with its stated purpose, but it relies on an opaque `cyeam` CLI for Trello login, downloads, and card creation, and the provided evidence does not establish a clear official package-registry or verifiable release path for that executable. Because this black-box CLI handles Trello credentials and student submission data, the skill carries high supply-chain and credential-forwarding risk despite otherwise coherent behavior.
Confidence: 85%Severity: 84%
Audit Metadata