wondelai-skills
Warn
Audited by Socket on Jun 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is mostly a catalog stub that directs installation of additional remote skills through an official CLI. The install source appears legitimate and documented, and there is no credential harvesting or hidden exfiltration, but the transitive skill installation meaningfully increases trust and execution risk beyond a simple design-reference skill.
Confidence: 91%Severity: 58%
Audit Metadata