kubecon-llm-k8s
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's actions fit its stated purpose as a Slidev template/deploy guide, and credentials flow only to official hosting CLIs. The main issue is install trust: it bootstraps from an unpinned third-party GitHub template with ambiguous repo ownership, then executes dependency installation, creating a disproportionate supply-chain risk for an otherwise simple presentation skill.
Confidence: 89%Severity: 72%
Audit Metadata