training-lecture-recap
Warn
Audited by Socket on Jun 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the recap behavior itself is benign and well-scoped, but the skill includes transitive installation of a remote GitHub-hosted skill through the skills CLI. Main risk is supply-chain and inherited-permission trust, not credential theft or malicious data routing.
Confidence: 88%Severity: 56%
Audit Metadata