trendwatch
Warn
Audited by Socket on Jul 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s marketing-analysis purpose broadly matches its collection and file-writing behavior, but it has a larger-than-average footprint for a skill: persistent self-modifying state, heavy scraping through unofficial tools, and substantial exposure to untrusted external content while retaining write capability. No clear credential theft or malicious exfiltration is present, but the install and prompt-injection surface make it medium risk.
Confidence: 86%Severity: 59%
Audit Metadata