find-skills
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose fits skill discovery, but the skill also installs arbitrary additional skills and dependencies, creating significant transitive supply-chain risk. The official-looking CLI reduces malware confidence, yet autonomous install behavior, mutable `@latest` execution, and recursive dependency installation make the skill higher-risk than a simple search helper.
Confidence: 88%Severity: 74%
Audit Metadata