stata-replication
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities mostly align with its stated Stata replication purpose, and the dependency is a real public project with matching official docs. Risk remains medium because it expands trust to a third-party MCP server, uses unpinned package execution, and grants broad execution-capable tools; these are proportionate but not low-risk.
Confidence: 88%Severity: 52%
Audit Metadata