impeccable
Warn
Audited by Socket on Oct 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stub is broadly consistent with its stated purpose, but its core action is transitive installation of another skill and a later same-project native binary download. No strong signs of credential theft or deceptive exfiltration appear in the stub, yet the trust chain and external executable make this higher risk than a normal documentation-only skill.
Confidence: 89%Severity: 63%
Audit Metadata