technical-writing

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main writing guidance is benign and coherent, but the companion-skill discovery and install behavior is out of scope for a technical-writing skill. The biggest issue is transitive installation of third-party skills via `npx skills add`, which expands trust and agent capability beyond the claimed purpose even though there is no direct credential theft or exfiltration here.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Apr 7, 2026, 03:07 PM
Package URL
pkg:socket/skills-sh/Samuelca6399%2FAbsolutelySkilled%2Ftechnical-writing%2F@5daa7e3fca4024579f6981ac70a8b8425854e887
Security Audit — socket — technical-writing