skills/ricardodantas/skills/hugo-write-post/Socket

hugo-write-post

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

Mostly coherent Hugo-authoring skill, but it relies on an unreviewed companion skill and explicitly encourages transitive skill installation. The main risk is external skill trust and forwarding local writing samples outside the immediate workflow, not overt malware or credential harvesting.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Aug 8, 2026, 05:52 PM

Package URL

pkg:socket/skills-sh/ricardodantas%2Fskills%2Fhugo-write-post%2F@b2132a034bb9aa99dfc896dff33223a7d8182c879036344040e2403a1bea57e9