research-workflow
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the workflow’s stated purpose is coherent, but it relies on opaque third-party sub-skills and broad ingestion of untrusted web content. The main risks are transitive trust and indirect prompt injection, not confirmed malware.
Confidence: 81%Severity: 56%
Audit Metadata