content-strategy
Warn
Audited by Socket on Oct 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stub’s purpose and capabilities mostly align, but its main function is to cause transitive installation of a remote skill. Provenance is better than a random downloader because it uses the official Skills CLI/plugin flow and a matching public repo, yet the unpinned remote install and inherited-permissions model make this medium risk rather than benign.
Confidence: 88%Severity: 56%
Audit Metadata