writing
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s writing-focused behavior is mostly aligned with its stated purpose, and there is no direct exfiltration endpoint or overt credential theft. However, it depends on unverifiable local executables and transitive skill calls for core processing, which creates a disproportionate trust and supply-chain risk for a content workflow.
Confidence: 81%Severity: 74%
Audit Metadata