skills/paniolo-ai/skills/paniolo-wiki/Socket

paniolo-wiki

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS due to install-trust ambiguity around the validator/tooling chain, not because of malicious behavior in the skill itself. Purpose, permissions, and local data flows are mostly coherent for wiki maintenance, but executing repo-defined pnpm scripts that may invoke weakly verified @paniolo native binaries raises high supply-chain risk.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Jul 24, 2026, 04:56 PM

Package URL

pkg:socket/skills-sh/paniolo-ai%2Fskills%2Fpaniolo-wiki%2F@7f9318d21d70b74955592514c843c546372746bbcfa8155bcc53ee9ced36b6e9