docs-update-expert

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core documentation-update behavior is coherent and there is no direct credential harvesting, secret-file access, or obvious exfiltration. The main risk is transitive trust: this skill explicitly asks to install additional skills and relies on external-doc retrieval while retaining file-editing capability, which raises medium risk even though the stated purpose is legitimate.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Aug 7, 2026, 08:04 PM
Package URL
pkg:socket/skills-sh/ricardodantas%2Fskills%2Fdocs-update-expert%2F@c6f9a617916b2cdfbb6ab972463d5ea5bfbc9e403b264ef3d5e8fe4ddd8d4021
Security Audit — socket — docs-update-expert