using-axis
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core AXIS functionality is coherent and officially sourced from Netlify, so this is not malware and not fundamentally deceptive. The main concern is proportional transitive trust: the skill instructs installation of more skills through a separate third-party skills CLI that can fetch remote content and may use existing Git credentials, which expands the trust boundary beyond the stated report-reading/operator-guide purpose.
Confidence: 90%Severity: 54%
Audit Metadata