find-awesome-skills
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, and the review guidance is safety-oriented, but the actual execution path depends on an ambiguously sourced `npx skillatlas` package and then installs further third-party skills. The main issue is install-trust and transitive trust, not confirmed credential theft or overtly malicious behavior.
Confidence: 86%Severity: 76%
Audit Metadata