skill-share
Warn
Audited by Socket on Jun 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s local creation/packaging behavior fits its purpose, but the Slack integration relies on a stale third-party Rube/Composio layer, with under-documented installer provenance and intermediary data flow for Slack messages/auth. No clear malware indicators appear, but trust and data-flow integrity are only partially justified.
Confidence: 86%Severity: 52%
Audit Metadata