docs-update-expert

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core documentation-update behavior is coherent and there is no direct credential harvesting, secret-file access, or obvious exfiltration. The main risk is transitive trust: this skill explicitly asks to install additional skills and relies on external-doc retrieval while retaining file-editing capability, which raises medium risk even though the stated purpose is legitimate.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Aug 28, 2026, 12:30 PM
Package URL
pkg:socket/skills-sh/ricardodantas%2Fskills%2Fdocs-update-expert%2F@bd85c0e87b820628414d0f37779686877634362323ad962e296eadf14bcf7b00
Security Audit — socket — docs-update-expert