service-blueprint
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stub is coherent with its stated purpose, but its primary function is to induce transitive installation of a third-party skill from a personal GitHub repo. The install path itself appears legitimate for the skills ecosystem, so this is not confirmed malware, but it carries medium risk because the real behavior lives in unreviewed downstream content that inherits agent permissions.
Confidence: 89%Severity: 61%
Audit Metadata