update-docs-workflow

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent documentation-maintenance workflow using official Dart/Jaspr tooling, but it includes execution of an unverifiable user-local auditor script outside the repository. That makes the skill suspicious rather than benign, though there is no clear evidence of credential theft, exfiltration, or malicious intent.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 02:36 PM
Package URL
pkg:socket/skills-sh/rodydavis%2Fsignals.dart%2Fupdate-docs-workflow%2F@619f4225c3460f9c024beb4c126254f3a5abc2b9948fe3f263189bd8be80629e
Security Audit — socket — update-docs-workflow