writing

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s writing-focused behavior is mostly aligned with its stated purpose, and there is no direct exfiltration endpoint or overt credential theft. However, it depends on unverifiable local executables and transitive skill calls for core processing, which creates a disproportionate trust and supply-chain risk for a content workflow.

Confidence: 81%Severity: 74%
Audit Metadata
Analyzed At
Oct 18, 2026, 01:19 PM
Package URL
pkg:socket/skills-sh/notque%2Fvexjoy-agent%2Fwriting%2F@fff614e16288f3b1d7d93687c911d918b18f6513d063b3c607143741e79389ea