olive-young-search
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose is plausible, but the local skill is only a thin loader that shifts trust to a remotely updated npm CLI and remote instruction content. Same-org provenance reduces concern, yet runtime-deferral and non-exact package execution make the reviewed footprint insufficiently transparent for a benign classification.
Confidence: 88%Severity: 56%
Audit Metadata