excalidraw-diagram
Warn
Audited by Socket on Jun 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stub's stated purpose is coherent, but it mainly performs transitive installation of a third-party skill from an unpinned personal GitHub repo. Risk comes from remote skill installation and command execution trust, not from confirmed malicious behavior in the stub itself.
Confidence: 100%Severity: 60%
Audit Metadata